Penetration Testing Analyst Job at Sun Life, Wellesley, MA

  • Sun Life
  • Wellesley, MA

Job Description

Job Description At Sun Life, we work together, share common values, and encourage growth and achievement. We are seeking a skilled Penetration Testing Analyst to perform hands‑on security testing of applications, infrastructure, and systems. This role is primarily focused on penetration testing delivery , with secondary exposure to Red Team activities , contributing to adversary simulation exercises where required. The successful candidate will have strong technical testing capabilities, with an interest in developing broader offensive security skills. Key Responsibilities Perform web, API, mobile, and infrastructure penetration testing across enterprise applications. Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools. Conduct testing in line with established methodologies and security frameworks (e.g., OWASP). Produce clear, structured reports outlining: Vulnerabilities and root cause Business impact and risk rating Practical remediation recommendations Perform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage. Support re-testing activities to validate remediation of identified issues. Support Red Team or adversary simulation exercises where required. Contribute to reconnaissance and attack surface mapping, identification of potential attack paths. Support documentation of attack paths and identified security gaps. Assist in controlled exploitation activities under guidance, including: Initial access techniques Limited post‑exploitation validation (e.g., privilege escalation concepts, lateral movement awareness) Collaborate with senior team members to understand real‑world attacker behaviour and techniques. Required Skills & Experience Core Penetration Testing Skills (Essential) Hands‑on experience in: Web application security testing (OWASP Top 10) API security testing Basic network/infrastructure testing Strong understanding of: Authentication, session management, and access control flaws Input validation and injection vulnerabilities Experience with tools such as: Burp Suite, Nmap, sqlmap, or similar Ability to perform manual testing beyond automated scanning. Strong documentation and reporting skills, with focus on clear risk articulation. Red Teaming Skills (Desirable – Foundational Level) Basic understanding of adversary simulation concepts and attack lifecycle. Familiarity with: Reconnaissance techniques Common initial compromise methods Awareness of: Privilege escalation and lateral movement concepts Attack paths across enterprise environments Interest in developing Red Team and offensive security capabilities over time. Qualifications Bachelor's degree in Computer Science, Information Security, or a related field. Certifications such as OSCP, OSWA, CISSP or CompTIA are desired but not required. Benefits 22 Days Annual Leave - increasing to 25 days based on length of service Maternity Leave, Paternity Leave, Parental Leave C$400/275 Fitness Reimbursement for gym membership annually Annual Bonus plan based on Company and Individual Performance 100% Private Health Insurance cover for employees and 50% contribution for family members from date of hire Study Assistance Programme inclusive of Masters Programme S&S Club, Wellness Programme, GP Scheme, Flu Vaccines, Eye Care Scheme as well as lots of discounted events and classes Defined Contribution Pension Scheme Access to Professional Development Training Platforms #J-18808-Ljbffr Sun Life

Job Tags

Similar Jobs

Beth Israel Lahey Health

Physician Assistant- Interventional Radiology Job at Beth Israel Lahey Health

 ...timely communication with the attending physician. 3. Provides thorough and accurate...  ...documentation of all pertinent data, therapeutic interventions, patient responses and any medical/...  ...results from abnormal findings. 18. Assist in the maintenance of the... 

MASON COMPANIES INC

Digital Marketing Specialist Job at MASON COMPANIES INC

 ...Job Description Description: JOB SUMMARY: As a Digital Marketing Specialist, you will support our marketing efforts by managing...  ...relevant experience is required. Previous experience with internet marketing/e-commerce in a business environment is preferred.... 

ElderCare.com

URGENT: Elder Care Provider Wanted - Seeking Compassionate Elder Care Provider In Fort Defiance, Az $15.15 Hourly Rate! Job at ElderCare.com

 ...role, allowing for flexibility in your schedule while still fulfilling essential caregiving responsibilities. Our family pays $15.15 per hour for this position, and we believe in fair compensation for dedicated work.If you are interested in joining our family and making... 

Penn Line Enterprises, Inc.

Tree Climber/Trimmer Job at Penn Line Enterprises, Inc.

 ...Tree Trimmer A Tree Trimmer's primary responsibility is to perform tree trimming, clearing, and removal of trees along electric power lines and right-of-ways. A Tree Trimmer climbs trees to reach branches interfering with electric lines while using climbing equipment... 

ElderCare.com

URGENT: Elder Care Provider Wanted - Seeking Elder Care Provider In Liberal, Kansas $15/Hour Job at ElderCare.com

 ...administering medication, and assisting with personal care for our elderly family member. This position offers a competitive wage of $15 per hour. We are open to both live-in and live-out arrangements, providing flexibility for the right candidate.If you have experience in...