Remote Cybersecurity Specialist - Blue/Red Team Expert (Canada)

**Overview**

YO IT CONSULTING is recruiting for an innovative AI research laboratory that develops next-generation artificial intelligence systems for cybersecurity use cases. This remote contractor position seeks seasoned cybersecurity practitioners with comprehensive expertise spanning both Blue Team defense operations and Red Team offensive tactics. You'll leverage your real-world security experience to assess, challenge, and enhance AI models designed for threat detection, incident analysis, and attack modeling.

Your professional insights will shape how AI systems understand attack patterns, evasion methods, detection algorithms, and response procedures.

**

Responsibilities **

*Blue Team Defense:* Examine authentic and simulated security events including phishing campaigns, lateral movement, ransomware incidents, and privilege escalations. Analyze telemetry from SIEM, EDR/XDR, firewall, cloud platforms, and identity management systems. Utilize MITRE ATTACK framework for adversary behavior classification.

Evaluate detection rule effectiveness, alert quality, triage processes, and response procedures. Validate AI-powered investigations for technical accuracy and operational practicality.

*Red Team Offense:* Dissect complete attack sequences covering initial compromise, persistence mechanisms, privilege escalation, lateral movement, and data theft. Apply adversarial mindset to identify detection blind spots and bypass methodologies. Analyze exploitation techniques, malware behaviors, and stealth strategies.

Conduct attack surface assessments and real-world threat actor analysis. Challenge AI systems using authentic red team methodologies.

*AI Enhancement:* Deliver detailed reasoning behind investigative and offensive security decisions. Pinpoint AI threat analysis limitations and recommend enhancements. Contribute to benchmark development for detection accuracy, incident triage, and attack simulation effectiveness.

**

Requirements **

Minimum 5+ years cybersecurity experience in roles such as SOC Analyst (Level II/III), Incident Responder, Detection Engineer, Threat Hunter, Red Team Operator, Penetration Tester, or Security Consultant. Proven track record handling real-world security incidents. Blue Team proficiency with SIEM platforms, EDR/XDR solutions, log analysis, network traffic examination, and MITRE ATT&CK mapping.

Red Team skills including penetration testing, adversary emulation, and exploitation frameworks. Fluent English required. Full-time or part-time availability.

Independent contractor engagement, fully remote within Canada.

Monday to Friday, 9 AM – 5 PM (full-time)