Security Researcher

Fortinet, Inc.; Burnaby; On-site; CAD 119,000 - 136,000; Full time

Benefits offered by this job

100% company-paid medical, dental, and vision coverage

Health Spending Account

Flexible leave policies

Job summary

Fortinet, Inc. is seeking a skilled Security Researcher/Pentester to join their team in Metro Vancouver. In this role, you will conduct penetration tests on cloud products, utilizing advanced AI techniques and traditional testing skills. Ideal candidates have 3+ years of experience in information security and strong proficiency in tools like Nessus and Burp Suite. The position offers a salary between $119,000 and $136,000 annually, alongside a comprehensive benefits package including medical, dental, and retirement support.

Qualifications

• 3+ years of dedicated experience in information security.
• Demonstrated ability to use Kali Linux/Metasploit effectively.
• Hands-on experience with LLM fine-tuning frameworks.

Responsibilities

• Conduct penetration tests on Fortinet cloud products to identify vulnerabilities.
• Lead red-team activities on developing AI-assisted scripts.
• Collect threat intelligence and track emerging security techniques.

Skills

Penetration Testing

Kali Linux

AI/ML techniques

Cloud Security

Vulnerability Assessment

Education

CVE, pentest reports, technical articles

Tools

Nessus

Burp Suite

Metasploit

SQLmap

Job description

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are currently seeking a dynamic Security Researcher/Pentester to contribute to the success of our rapidly growing business. We are looking for a highly motivated individual who can thrive in a fast pace environment and successfully contribute to the team.

You would act as a Security Researcher/Penetration Tester. This is a highly technical role, combining cutting‑edge AI and LLM‑powered attack techniques with traditional penetration testing skills. You will assist the Information Security leadership on evaluating the security posture of Fortinet Cloud Services. This position will be strongly focusing on AI powered red teaming, cloud security adversarial research and LLM exploitation.

Responsibilities

• Conduct regular penetration tests and security evaluations on Fortinet cloud products, covering web applications and server backends under various authentication levels to identify vulnerabilities and security risks.
• Investigate and write POCs for published vulnerabilities and help the production team evaluate the exploitability and risks.
• Lead red‑team activities, specifically on developing AI‑assisted scripts, agents, and programs to penetrate and infiltrate in‑scope systems and ICT technologies; this includes leveraging LLMs as autonomous attack agents capable of chaining exploits across cloud environments.
• Collect threat intelligence, evaluate and maintain traditional pentest tools, and track emerging AI/LLM‑based offensive security techniques and tooling.
• Conduct AI red‑team exercises targeting LLM‑integrated cloud services and AI APIs, including prompt injection, indirect prompt injection, jailbreaking, and model inversion attacks.
• Perform LLM fine‑tuning and abliteration research — including training uncensored or capability‑unlocked variants of open‑source models (LLaMA, Gemma4) via LoRA/QLoRA and representation‑engineering techniques.
• Develop and operate LLM‑powered penetration testing pipelines: using AI agents (ReAct, tool‑use) to automate reconnaissance, vulnerability enumeration, exploit generation, and post‑exploitation chaining against cloud‑native targets (Kubernetes clusters, serverless functions, IAM privilege escalation paths, cloud storage misconfigurations).
• Research and document adversarial attack surfaces unique to AI‑powered products: RAG pipeline data poisoning, embedding inversion, model supply‑chain compromise, and training data extraction.

Qualifications

• 3+ years of dedicated experience in an information security role with a strong pen‑tester background (CVE, pentest reports, technical articles may be requested as proof).
• Professional penetration‑testing skills on information technologies including operating systems, software frameworks, databases, web applications, and networks.
• Proven skills with traditional pen‑test tools (Nessus, Burp Suite, Nuclei, SQLmap).
• Demonstrated ability to use Kali Linux / Metasploit to craft POCs for known vulnerabilities; ability to extend and automate these toolchains with LLM copilots or autonomous AI agents.
• Hands‑on experience with LLM fine‑tuning frameworks and techniques: LoRA / QLoRA (Unsloth, LLaMA‑Factory), supervised fine‑tuning on security datasets, and direct preference optimization (DPO) for behavior shaping.
• Proficiency in using LLMs and AI agents for offensive cloud security: automated IAM privilege‑escalation discovery, cloud misconfiguration enumeration, AI‑generated exploit payloads, and natural‑language‑driven attack orchestration.
• Familiarity with AI/ML cloud service attack surfaces: prompt injection against retrieval‑augmented generation (RAG) pipelines, embedding space attacks, model API abuse, and inference‑time adversarial inputs.
• Certifications such as OSCP, OSWE, HTB CPTS, HTB CWEE are highly valued.

The Canada base salary range for this full‑time position is expected to be between $119,000 - $136,000 annually. Wage ranges are based on various factors including the labour market, job type, and job level. Exact salary offers will be determined based on the candidate’s knowledge, skill level, qualifications, and experience.

Fortinet strives to provide you and your family with a comprehensive benefits package. Benefits eligibility starts on your first day of hire and includes 100% company‑paid medical, dental, and vision coverage, including a Health Spending Account and a Personal Spending Account that gives you flexibility to spend where you need it most. Our Employee & Family Assistance Plan (EFAP) offers access to counseling, legal advice, mental health resources, etc. Critical illness, disability, and life insurance, as well as a Group Registered Retirement Savings Plan (RRSP) with a company match are also provided. Paid Time Off and flexible leave policies, including paid health days, are offered.

All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the company’s discretion.

Fortinet is committed to providing reasonable accommodations for all qualified individuals with disabilities. If you require assistance or accommodation due to a disability, please contact us at [e-mail].

Fortinet is an equal opportunity employer. We value diversity in our company, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, military/veteran status or any other applicable legally protected characteristics in the location in which the candidate is applying.