{"id":1137808,"url":"https://alion.io/job/sun-life-canada-penetration-testing-analyst","title":"Penetration Testing Analyst","company":{"id":1049263,"name":"Sun Life","domain":"sunlife.ca","url":"https://alion.io/company/sunlife-ca","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":96,"open_postings":34,"ghost_share":0,"stale_share":0.324,"repost_share":0.029,"time_to_fill_p50_days":14,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Taguig, Philippines","Toronto, Canada","Philippines"],"countries":["PH","CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9500,"max_usd":26000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Red Teaming","optional":false},{"name":"SQLmap","optional":false}],"status":"live","first_seen_at":"2026-08-06T00:00:00Z","employer_posted_date":"2026-08-06","last_verified_at":"2026-10-18T07:25:13Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.\nAt Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.\nWhen you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.\nDiscover how you can make a difference in the lives of individuals, families and communities around the world.\nJob Description:\nAt Sun Life, we work together, share common values, and encourage growth and achievement. We are seeking a skilled Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems.\nThis role is primarily focused on Penetration Testing delivery, with secondary exposure to Red Team activities, contributing to adversary simulation exercises where required. The successful candidate will have strong technical testing capabilities, with an interest in developing broader offensive security skills.\nKey Responsibilities\nPerform web, API, mobile, and infrastructure penetration testing across enterprise applications.\n\nIdentify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools.\n\nConduct testing in line with established methodologies and security frameworks (e.g., OWASP).\n\nProduce clear, structured reports outlining:\nVulnerabilities and root cause\n\nBusiness impact and risk rating\n\nPractical remediation recommendations\n\nPerform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage.\n\nSupport re-testing activities to validate remediation of identified issues.\n\nSupport Red Team activities where required.\n\nContribute to reconnaissance and attack surface mapping, Identification of potential attack paths.\n\nSupport documentation of attack paths and identified security gaps.\n\nAssist in controlled exploitation activities under guidance, including:\nInitial access techniques\n\nLimited post-exploitation validation (e.g., privilege escalation concepts, lateral movement awareness)\n\nCollaborate with senior team members to understand real-world attacker behaviour and techniques.\n\nRequired Skills & Experience\nCore Penetration Testing Skills (Essential)\n2+ years of hands-on experience in:\nWeb application security testing (OWASP Top 10)\n\nAPI security testing\n\nBasic network/infrastructure testing\n\nStrong understanding of:\nAuthentication, session management, and access control flaws\n\nInput validation and injection vulnerabilities\n\nExperience with tools such as:\nBurp Suite, Nmap, sqlmap, or similar\n\nAbility to perform manual testing beyond automated scanning.\n\nStrong documentation and reporting skills, with focus on clear risk articulation.\n\nRed Teaming Skills (Desirable - Foundational Level)\nBasic understanding of adversary simulation concepts and attack lifecycle.\n\nFamiliarity with:\nReconnaissance techniques\n\nCommon initial compromise methods\n\nAwareness of:\nPrivilege escalation and lateral movement concepts\n\nAttack paths across enterprise environments\n\nInterest in developing Red Team and offensive security capabilities over time.\n\nQualifications\nBachelor's degree in Computer Science, Information Security, or a related field.\n\nCertifications such as OSCP, OSWA, CISSP or CompTIA are desired but not required.\n\nJob Category:\nIT - Technology ServicesPosting End Date:\n30/12/2026","description_format":"text","description_chars":3940,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-09-23T08:56:36Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.171,"p_room":0.28,"age_days":72,"expected_fill_days":14,"reasons":["conf:1","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/sun-life-canada-penetration-testing-analyst","json_url":"https://alion.io/job/sun-life-canada-penetration-testing-analyst.json","meta":{"generated_at":"2026-10-18T11:02:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16300,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1049263},"rest":"https://alion.io/mcp/rest/get_company?id=1049263"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsun-life-canada-penetration-testing-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsun-life-canada-penetration-testing-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsun-life-canada-penetration-testing-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sun-life-canada-penetration-testing-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsun-life-canada-penetration-testing-analyst"}]}