Junior Pentester

Software Secured; Ottawa; Remote; CAD 70,000 - 95,000; Full time

Benefits offered by this job

UberEats budget

Home office stipend

Profit-sharing 7-12%

Job summary

Software Secured, based in Ottawa, Ontario, is seeking a Junior Pentester to help secure mission-critical applications. You will perform security tests across web, API and mobile, and assist with design reviews, threat modeling, and remediation strategies.

You should be self-driven, hold strong communication skills, and enjoy working with developers on secure coding practices. Remote work is available across Canada with opportunities to travel to the Ottawa office.

Qualifications

• Experience performing web, API or mobile pentesting, or independent research or bug bounties.
• OSCP/OSWE/GWAPT would close gaps.
• Software development background in one or more of Python, .NET, Ruby, Java, Objective C/Swift.
• Familiar with OWASP Top 10, ASVS, or WSTG.
• Competed in CTFs (Capture The Flags).
• Strong verbal and written communication skills and analytical problem solving.

Responsibilities

• Perform security tests including web, API and mobile pentesting for clients.
• Assist with security design reviews, threat modeling and remediation strategies.

Skills

Web pentesting

API pentesting

Mobile pentesting

Python

Java

Objective C/Swift

OWASP Top 10

CTF participation

Strong communication

Analytical problem solving

Education

Security certifications (OSCP/OSWE/GWAPT)

Tools

Cloud platforms (AWS/Azure)

CTF platforms

Job description

Software Secured is an application security firm located in Ottawa, Ontario. We help software development teams get ahead of hackers using a suite of services and products. Software Secured is a place where the curious come to grow. Curiosity, ownership, and humility are at the forefront of our core values and we are constantly striving to make Software Secured an awesome place to work where people can learn, be leaders in their space, and share their knowledge with others. We want to continue building an organization of ambitious, smart people who are committed to our mission and focused on overall company success. Software Secured is looking for a Junior Pentester.

As a Junior Pentester at Software Secured, you will have the opportunity to help our clients secure their mission-critical applications. This includes performing security code review, web, mobile, and network security tests. Help clients with security design reviews, threat modeling, and remediation strategies.

The ideal candidate will be self-driven and take ownership of the quality of their own work as well as the team's deliverables. The individual will be motivated and passionate about application security and take pride in spreading the word and helping developers write secure code. You will be a part of the local and global security community and care about pushing the status quo. He/she will also have an affinity for security best practices and vulnerability exploits.

Mandatory:

• Experience performing web, API or mobile pentesting, or comparable experience doing independent research or bug bounties.
• If pentesting experience is limited, an OSCP, OSWE, or GWAPT would go a long way to closing the gap.
• Demonstrated software development background in one or more of Python, .NET, Ruby, Java, Objective C/Swift.
• Pretty familiair with things like OWASP Top 10, ASVS, or WSTG
• You have competed in CTFs (Capture The Flags).
• Expert with OWASP Top 10 and can explain them easily.
• Strong verbal and written communication skills.
• Demonstrated analytical and problem solving skills

Nice to Haves:

• Experience in adjacent security related roles e.g. Secure Development/Engineering, Security Operations/SOC/Blue Teaming, Incident Response, IT Security, etc.
• Experience or security certification in cloud technologies (AWS, Azure)
• Open-source contributions
• Public speaking experience
• Performing training in a professional capacity
• Teaching experience, preferably security or CS topics

What we are offering:

• Competitive base salary - $70,000 - $95,000 CAD
• Work remotely anywhere in Canada (you're welcome to work in the Ottawa office when you'd like the option).
• Work remotely from anywhere in the world for up to 2 months per year.
• Yearly profit-sharing between 7 - 12% of your base salary, based on your performance.
• Perks such as: monthly UberEats budget, annual home office stipend.
• 3 weeks of vacation to start. Additionally, the whole company is off for the week between Christmas and the New Year.
• Parental, bereavement and child loss leave.
• You will receive a great health benefits package (includes dental, vision, practitioners, etc.).
• You will receive a free audible account.