Junior Penetration Tester

ISA Cybersecurity Inc; Toronto; Hybrid; CAD 60,000 - 80,000; Full time

Job summary

ISA Cybersecurity Inc is looking for a motivated Junior Penetration Tester to join its team in Toronto. The ideal candidate will assist in identifying and exploiting security vulnerabilities, gaining valuable experience while supporting ISA's mission to enhance cybersecurity for clients. This role offers a chance to advance in a well-regarded company with strong values around safety and support.

Benefits

Flexible sick and personal days

Generous health plan with mental health resources

Professional development opportunities

Maternity and parental leave top-up

Employee referral bonus

Competitive salaries with RRSP matching

Access to LinkedIn Learning

Qualifications

• At least 2 years of professional experience in cybersecurity.
• Hands-on experience with penetration testing.
• Strong understanding of security vulnerabilities.

Responsibilities

• Assist in conducting penetration tests on various environments.
• Document findings and communicate to stakeholders.
• Stay updated with the latest security threats and vulnerabilities.

Skills

Communication

Interpersonal skills

Tools

Burp Suite

Nmap

Metasploit

Nessus

Job description

ISA is seeking a motivated Junior Penetration Tester to join our cybersecurity team. In this role, you will assist in identifying and exploiting security vulnerabilities across networks, systems, and applications, while gaining hands-on experience in offensive security methodologies. This is a great opportunity for cybersecurity professionals with foundational experience who are eager to advance their skills in penetration testing.

About Us :

We are proud to be recognized as a top employer for multiple years in a row, we currently hold the distinctions of Canada’s Top Small and Medium Employers 2025, Greater Toronto’s Top Employers 2025 and are Certified Great Place to Work 2025-2026.

At ISA Cybersecurity, our mission is to help clients achieve their privacy and security goals, and to be proactive in the fight against security threats. ISA is Canada’s leading cybersecurity-focused company, with three decades of experience delivering cybersecurity services and people you can trust. We provide our clients with comprehensive counsel on complex, evolving, and multi-faceted issues related to cybersecurity and breach incident response.

ISA Cybersecurity also offers a world-class 24 / 7 by 365 SOC 2 Type II certified CIOC (cybersecurity intelligence operations center), giving our clients deeper insights and earlier warnings about coordinated cyber-attacks. ISA strategically partners with many of the most respected security technology firms in the world. Through these relationships, our clients can gain access to a broad portfolio of industry-leading cyber solutions best suited to protect their corporate assets and customer data.

In today’s volatile world of digital threats, we help Canadian companies to better understand their current security posture and how to mitigate risks.

We operate in a remote-first environment. Office presence is typically less than 20% of the time, varying by role and work requirements. Our office space, located at Bloor and Islington, is a collaborative space designed for in-person meetings and drop-ins. We enjoy hosting in-person quarterly townhalls and social events throughout the year to encourage teambuilding and collaboration.

Responsibilities :

• Assist in conducting penetration tests on web applications, networks, systems, and cloud environments
• Perform vulnerability assessments and validate identified issues
• Document technical findings in clear, concise, and professional reports
• Support remediation efforts by communicating findings and recommendations to technical and non-technical stakeholders
• Stay up to date with the latest security threats, tools, and techniques
• Participate in red team exercises and security testing engagements under supervision
• Collaborate with team members across security operations, engineering, and compliance

Qualifications :

• At least 2 years of professional experience in cybersecurity, including areas such as Offensive Security, Vulnerability Management, Incident Handling, Security Analysis, or other related security roles
• Hands-on experience with penetration testing, vulnerability assessments, and vulnerability management
• Strong understanding of common vulnerabilities (OWASP Top 10, CWEs, CVSS, etc.)
• Ability to write clear, detailed technical reports with remediation steps
• Having one or more offensive security certifications, such as OSCP, CompTIA Pentest+, GIAC GCIH, or similar, would beconsidered an asset
• Familiarity with tools such as Burp Suite, Nmap, Metasploit, Nessus, or equivalent
• Strong communication and interpersonal skills

Why Join Us?

At ISA Cybersecurity we lead with our "Why". Our Why is to make people feel safe. This not only applies to the result of services that we provide to our clients, but how people feel when interacting with us. Whether you're an employee of ISA or a client we want you to feel safe and supported. Each one of our team members is expected to uphold this leadership quality and embrace it through consistent demonstration of our core values of Explore, Persevere, Adapt and Uplift.

We are proud to offer a variety of employee friendly programs that enable our team to perform at their best.

Highlights of our programs and policies include :

• Flexible sick and personal days for all employees
• Generous health plan with enhanced mental health resources and programs
• Professional development opportunities and education reimbursement up to $2,000 annually for all employees
• Maternity and parental leave top-up
• Employee referral bonus of $2,000
• Competitive salaries complemented with RRSP matching and bonus programs
• Distance remote working policy
• LinkedIn Learning access for all team members

We also place great value on celebrating the contributions of all employees through the following service recognition programs :

• Service anniversary recognition and generous five-year milestone service awards
• President’s Club recognizing special achievement awards : Team Member of the Year for Sales, CIOC and Cyber Services, the Rich Uhrich Founder’s Award that is nominated on by all employees and four President’s Awards (Risk Taker, Lost Without You, Money Maker and On the Rise)
• Spot rewards providing opportunities for instant peer recognition

Information-sharing and team-building initiatives include :

• Annual kick-off meeting to communicate our strategic priorities
• Informal staff events like pizza lunches or games day
• Quarterly town hall meetings
• Regular team get togethers and client events
• Scheduled employee feedback surveys and goal setting focus groups

Thank you for your interest in joining ISA Cybersecurity. Our team looks forward to reviewing your application. We will be reaching out to you directly if your experience matches our needs.

Accessibility :

ISA Cybersecurity is committed to providing accommodations for applicants with disabilities. If you require specific accommodation because of a disability or medical need, please inform ISAs Human Resources team ( [emailprotected] ) so arrangements can be made for appropriate accommodation to be in place during the recruitment process.