Senior Cloud Penetration Tester

Stantec Consulting International Ltd.; Toronto; On-site; CAD 115,000 - 165,000; Full time

Benefits offered by this job

Health, dental, vision plans

Wellness program

Employee stock purchase program

Paid time off

Job summary

Stantec Consulting International Ltd. is seeking a Senior Ethical Hacker to perform security assessments on web applications and cloud services, emulating real-world attacks using the Mitre ATT&CK framework.

The role focuses on identifying vulnerabilities, misconfigurations, and risks to prevent breaches and strengthen security posture. You will lead cross-functional testing, communicate findings to technical teams and executives, and architect automated security workflows.

Qualifications

• Minimum 5-7+ years in cybersecurity
• Proficient with manual web/cloud penetration testing
• Proficient writing custom attack tools in multiple languages
• Proficient with interception proxies and Burp Suite
• Experience with cloud services (Azure/AWS/GCP/Oracle)
• Strong communication of findings to senior stakeholders
• Ability to work from Windows or Linux command line

Responsibilities

• Collaborate with cross-functional teams to test security
• Create reports and communicate findings to technical teams and executives
• Develop processes to help engineering meet remediation goals
• Present test findings in debrief meetings with C-Suite or sponsors
• Penetration tests on cloud systems, apps, and APIs
• Assess cloud/app configurations, access controls, and encryption

Skills

Offensive security

Red Team

Python scripting

Burp Suite

Cloud security

Windows/Linux CLI

XSS/SQLi payloads

Threat modeling

Education

Related Degree or Certificate in Security

Tools

Burp Suite Enterprise

Terraform

Ansible

Kubernetes

Job description

Stantec Consulting International Ltd. is seeking a Senior Ethical Hacker to perform security assessments on web applications and cloud services, emulating real-world attacks using the Mitre ATT&CK framework.

The role focuses on identifying vulnerabilities, misconfigurations, and risks to prevent breaches and strengthen security posture. You will lead cross-functional testing, communicate findings to technical teams and executives, and architect automated security workflows.