Security Consultant – Penetration Testing

E12; Edmonton; Hybrid; CAD 80,000 - 110,000; Full time

Benefits offered by this job

Paid vacation

Health and dental cover

Training and certification support

Job summary

iGears Canada, the Edmonton office of iGears Technology Limited, is building a cybersecurity team to deliver penetration testing for clients and to secure our platforms. We offer full-time and part-time, on-site or hybrid arrangements in Canada.

We are seeking an experienced penetration tester with OSCP or equivalent certs, 2+ years of hands-on work, and strong Burp Suite proficiency. CAD 80,000–110,000 per year, depending on experience and certifications.

Qualifications

• OSCP or equivalent hands-on certification (e.g. CREST CRT/CCT, GIAC GPEN/GWAPT, eWPTX, PNPT) is required.
• At least 2 years of hands-on penetration testing, with web app and API testing as core skills.
• Strong command of Burp Suite and common testing tools; scripting in Python, Bash or similar.
• Clear written English for client reports.

Responsibilities

• Plan and run penetration tests of web applications, APIs and mobile apps for clients in Canada and Hong Kong, following OWASP WSTG, ASVS and MASVS.
• Test connections to third-party services and cloud environments (OAuth, webhooks, payment and messaging APIs).
• Verify findings by hand, rate risk with CVSS, and write report with fix guidance for developers and management.
• Retest fixes and issue verification letters.
• Scope engagements with clients: rules of engagement, test accounts, testing windows and written authorisation.
• Test and harden iGears’ own SaaS platforms, and coach developers on secure coding.
• Work with our Hong Kong team on joint engagements across time zones.

Skills

Penetration testing

Burp Suite

Python scripting

Report writing

Client communication

Tools

Burp Suite

Python

Bash

Job description

About iGears

iGears Canada is the Edmonton office of iGears Technology Limited, a software company founded in Hong Kong in 2004. We develop and run 20 of our own SaaS products and have shipped 200+ apps for clients including listed companies, public-sector bodies, NGOs, universities and churches. Our Edmonton office opened in 2024, and we are now building a cybersecurity team in Canada to deliver penetration testing for clients and to secure our own platforms.

Work arrangements

Full-time and part-time arrangements are welcome. On-site or hybrid arrangements are welcome.

What you’ll do

• Plan and run penetration tests of web applications, APIs and mobile apps for clients in Canada and Hong Kong, following OWASP WSTG, ASVS and MASVS
• Test how applications connect to third-party services (OAuth, webhooks, payment and messaging APIs) and cloud environments
• Verify every finding by hand, rate risk with CVSS, and write clear reports with fix guidance for developers and management
• Retest fixes and issue verification letters
• Scope engagements with clients: rules of engagement, test accounts, testing windows and written authorisation
• Test and harden iGears’ own SaaS platforms, and coach our developers on secure coding
• Work with our Hong Kong team on joint engagements across time zones

What you’ll bring

• OSCP, or an equivalent hands‑on certification (e.g. CREST CRT or CCT, GIAC GPEN or GWAPT, eWPTX, PNPT)
• At least 2 years of hands‑on penetration testing, with web application and API testing as core skills
• Strong command of Burp Suite and common testing tools; scripting in Python, Bash or similar
• Clear written English for client reports
• Legal entitlement to work in Canada

Nice to have

• OSWE, OSEP, BSCP or CREST CCT APP
• Mobile (iOS/Android), Active Directory or cloud (AWS, Azure, GCP) testing
• Source code review
• Experience testing applications in regulated sectors such as financial services
• CVEs, bug bounty findings or a CTF track record

What we offer

• CAD $80,000–110,000 a year, depending on experience and certifications
• Real client engagements, plus 20 in-house SaaS products to test and secure
• A founding role in our Canadian security team, reporting to our CTO
• Paid vacation, health and dental cover where eligible, and support for relevant training and certification exams

Explore our platforms before you apply

• AI: GenCMS (gen-cms.com), AskCore (askcore.org), HumanLevelUP (humanlevelup.org), PromoPilot (promo-pilot.org), Webetter (webetter.co), PhotoCen (photocen.com), Duckbot (duckbot.hk, preview)
• Business operations: fileEC (fileec.com), InsightBook (insightbook.org), HRFlowTech (hrflowtech.com), MemberSys (membersys.org), AppointSys (appointsys.org), Paperless.Cards (paperless.ca rds)
• Messaging and marketing: SendPromotion.Email (sendpromotion.email), SendSMS.click (sendsms.click), MarketHK (markethk.net)
• Education and community: LearnSys (learnsys.org), ITChurch (itchurch.online)
• Directories: E12 (e12.hk, e12.ca) and E12 Careers (jobs.e12.hk, jobs.e12.ca)

More at https://www.igears.ca and https://www.igears.com.hk/platforms/