Junior Penetration Tester

Software Secured; Ottawa; Hybrid; CAD 55,000 - 85,000; Full time

Benefits offered by this job

UberEats budget

Home office stipend

3 weeks vacation

Week off between Christmas and NewYear

Parental leave

Bereavement and child loss leave

Job summary

Software Secured in Ottawa, Canada, is looking for a junior penetration tester to help secure hundreds of applications and networks. You will perform security testing across web, API, and mobile apps, plus code reviews and threat modelling.

The ideal candidate is self-driven, eager to learn, and can clearly communicate findings to developers. Remote-friendly within Canada with potential Ottawa office visits and a yearly profit-sharing option.

Qualifications

• Experience performing web, API, or mobile pentests, or comparable independent research or bug bounties.
• OSCP/OSWE/GWAPT would help close the gap for pentesting.
• Demonstrated software development background in Python, .NET, Ruby, Java, Objective C/Swift.
• Familiar with OWASP Top 10, ASVS, or WSTG.
• Competed in CTFs (Capture the Flag) competitions.
• Excellent verbal and written communication skills.
• Demonstrated analytical and problem-solving skills.

Responsibilities

• Perform security tests on web, API, mobile apps, and networks.
• Conduct security code reviews and remediation planning.
• Assist with security design reviews and threat modelling.
• Communicate vulnerabilities and recommended fixes to clients clearly.

Skills

Python

Java

Objective-C/Swift

Ruby

OWASP Top 10

Threat modelling

CTF

Strong communication

Tools

AWS

Azure

Job description

Software Secured is a leading PenetrationTesting as a Service company, with a head office in beautiful Ottawa, Canada. We help software development teams get ahead of hackers using a suite of services and products.

Our pentesting team is looking for a junior pentester to join us and help secure a few hundred more applications and networks.

As aJunior Pentesterat Software Secured, you will have the opportunity to help our clients secure their mission-critical applications. This includes performing security code review, web, mobile, and network security tests. Help clients with security design reviews, threat modelling, and remediation strategies.

The ideal candidate will be self-driven and take ownership of their own work and the team’s deliverables. The individual will be motivated and passionate about application security and take pride in spreading the word and helping developers write secure code. You will be a part of the local and global security community and care about pushing the status quo.He/she will also have an affinity for security best practices and vulnerability exploits.

Mandatory:

• Experience performing web, API, or mobile pentests, or comparable experience conducting independent research or participating in bug bounties.
• If pentesting experience is limited, an OSCP, OSWE, or GWAPT would go a long way to closing the gap.
• Demonstrated software development background in one or more of Python, .NET, Ruby, Java, Objective C/Swift.
• Pretty familiar with things like OWASP Top 10, ASVS, or WSTG
• You have competed in CTFs (Capture the Flag) competitions.
• Expert with OWASP Top 10 and can explain them easily.
• Strong verbal and written communication skills.
• Demonstrated analytical and problem-solving skills

Nice to Haves:

• Experience in adjacent security-related roles, e.g. Secure Development/Engineering, Security Operations/SOC/Blue Teaming, Incident Response, IT Security, etc.
• Experience or security certification in cloud technologies (AWS, Azure)
• Open-source contributions
• Public speaking experience
• Performing training in a professional capacity
• Teaching experience, preferably in security or CS topics

What we are offering:

Work remotely anywhere in Canada (you're welcome to work in the Ottawa office when you'd like the option).

Work remotely from anywhere in the world for up to 2 months per year.

Yearly profit-sharing between 7% - 12% of your basesalary, based on your performance.

Perks such as: monthly UberEats budget, annual home office stipend.

3 weeks of vacation to start. Additionally, the whole company is off for the week between Christmas and the New Year.

Parental, bereavement and child loss leave.