In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity, not just answers, in all areas of business. We embrace diverse backgrounds and global perspectives, and we cultivate diversity by respecting, including, and valuing one another. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel.
Our Offensive Security professionals are on a mission to make the world a safer place, one company at a time. We believe that our work to help our clients discover and remediate their unique security risks makes every one of us safer. Our clients trust us to use cutting-edge offensive security tools, creativity, imagination, and expert knowledge to find cybersecurity risks in their networks, systems, and software.
We're looking to grow our team of penetration testers in Canada. We perform testing of computer networks, web and smartphone applications, cloud infrastructure, hardware devices, employees via social engineering, organizations via red team testing, and more.
At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges.
Apply now to join One team, One Kroll.
RESPONSIBILITIES:
As an Offensive Security Consultant, you’ll be reporting to a Principal Consultant in our Offensive Security team and deliver projects for our clients, large and small, across North America. You will perform various internal and external network penetration tests, wireless penetration tests, and web application and API penetration tests. You will also draft reports based on the assessment results and gathered evidence, present your results to clients, and help address client inquiries regarding these results. In addition to the execution of traditional security assessments, you will participate in their refinement and improvement.
In summary, you will:
Execute offensive security and consultative engagements for our clients’ network infrastructure and applications
Author deliverables such as vulnerability reports and executive reports
Engage with our clients to understand their requirements, update them on project status, answer their queries, and present your findings and recommendations
Update your skills and knowledge with the latest trends in cybersecurity and emerging technology
REQUIREMENTS:
Bachelor’s degree or college diploma in information security, computer science or engineering, or IT/System/Network administration
3+ years in cybersecurity, with at least 2 years in network penetration testing
Strong understanding of Windows, Active Directory, Linux, networking, and security architecture
Knowledge of network concepts including routing, switching, VLANs, firewalls, ACLs, VPNs, and segmentation
Familiarity with security technologies such as IDS/IPS, EDR, SIEM, DLP, and endpoint security platforms
A strong understanding of offensive security methodology and vulnerability frameworks such as the OWASP Testing Guide, MITRE ATT&CK, PTES, or others
Experience with common offensive security tools including nmap, Nessus, Kali Linux, Burp Suite, PowerShell
An ability to analyze root causes and deliver technological recommendations to our clients
Excellent oral and written communication skills
Experience working both as part of a team and independently
Certifications such as OSCP, SANS GPEN, Cisco CCNA, CompTIA Network+, OSWE, SANS GWAPT, CREST CPSA, or CREST CRT, are an asset
About Kroll
Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.
In order to be considered for a position, you must formally apply via careers.kroll.com.
Kroll is committed to equal opportunity and diversity, and recruits people based on merit.
The current salary range for this position is $90,000 to $110,000 CAD
Skills Required
- Bachelor's degree or college diploma in information security, computer science, engineering, IT, system administration, or network administration
- At least 3 years of cybersecurity experience
- At least 2 years of network penetration testing experience
- Strong understanding of Windows, Active Directory, Linux, networking, and security architecture
- Knowledge of routing, switching, VLANs, firewalls, ACLs, VPNs, and network segmentation
- Familiarity with IDS/IPS, EDR, SIEM, DLP, and endpoint security platforms
- Understanding of offensive security methodologies and vulnerability frameworks such as OWASP Testing Guide, MITRE ATT&CK, and PTES
- Experience using nmap, Nessus, Kali Linux, Burp Suite, and PowerShell
- Ability to analyze root causes and provide technological recommendations
- Excellent oral and written communication skills
- Ability to work independently and as part of a team
- OSCP, SANS GPEN, Cisco CCNA, CompTIA Network+, OSWE, SANS GWAPT, CREST CPSA, or CREST CRT certification
Kroll Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Kroll and has not been reviewed or approved by Kroll.
-
Healthcare Strength — Medical, dental, and vision coverage with HSA/FSA options are part of the U.S. package, alongside life and AD&D. Breadth across core health benefits is positioned as competitive for a large advisory firm.
-
Retirement Support — A 401(k) plan with company match is a core element of the package. Retirement support is consistently highlighted as competitive within total rewards.
-
Leave & Time Off Breadth — Paid holidays, sick leave, and PTO are included, with generous time off and parental/family leave for U.S. roles. Some roles also offer hybrid/WFH flexibility that complements time-off usability.
Kroll Insights
What We Do
Kroll is the world’s premier provider of services and digital products related to valuation, governance, risk and transparency. We work with clients across diverse sectors in the areas of valuation, expert services, investigations, cyber security, corporate finance, restructuring, legal and business solutions, data analytics and regulatory compliance. Our firm has nearly 5,000 professionals in 30 countries and territories around the world. For more information, visit www.kroll.com.
