Penetration Tester (Hybrid) - Red Team & Cloud Security

Malleum; Newmarket; Hybrid; CAD 130,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Performance incentives

Comprehensive benefits

Job summary

Malleum is seeking a Penetration Tester in Canada to deliver hands-on offensive security engagements across client networks, applications, cloud environments, and OT/ICS. You will work directly within client environments, emulating real-world adversaries, documenting findings, and guiding remediation in sovereign and regulated settings.

This hands-on role requires strong technical tradecraft, excellent client presence, and the discipline to deliver clear, safe, and timely results.

Qualifications

• 4+ years of professional penetration testing or red team experience.
• Strong client-facing communication and stakeholder management skills.
• Deep knowledge of network, web app, and AD attack paths.

Responsibilities

• Plan, scope, and execute penetration tests across external, internal, web, API, mobile, cloud, wireless, and AD targets.
• Conduct red team and adversary emulation engagements aligned with MITRE ATT&CK.
• Perform breach simulations, internal pivoting, privilege escalation, and lateral movement tests.
• Support purple team exercises to improve detection and response.
• Develop tooling/scripts to aid engagements and remediation.

Skills

Client communication

Stakeholder management

Network attack paths

Web app security

Scripting (Python, PowerShell, Bash)

Strong written/verbal English

Education

Bachelor's degree in CS or related field

Tools

Burp Suite Pro

Nmap

Metasploit

Cobalt Strike

BloodHound

Mimikatz

Job description

Malleum is seeking a Penetration Tester in Canada to deliver hands-on offensive security engagements across client networks, applications, cloud environments, and OT/ICS. You will work directly within client environments, emulating real-world adversaries, documenting findings, and guiding remediation in sovereign and regulated settings.

This hands-on role requires strong technical tradecraft, excellent client presence, and the discipline to deliver clear, safe, and timely results.