Senior Cloud Penetration Tester & Red Team Lead

Stantec Consulting International Ltd.; Markham; On-site; CAD 115,000 - 165,000; Full time

Benefits offered by this job

Health, dental, vision plans

Wellness program

RRSP/stock purchase program

Job summary

Stantec Consulting International Ltd. in Canada is seeking a Senior Ethical Hacker to conduct security assessments of web applications and cloud services, emulating real-world attacks using the MITRE ATT&CK framework.

The goal is to identify weaknesses and strengthen the security posture before threats exploit them. You will collaborate with security, engineering, and cloud teams, run cloud and API pentests, and present findings to executives in debriefs.

Qualifications

• 5-7+ years in cybersecurity offensive security or red team
• Proficient with manual web/cloud penetration testing without tools
• Proficient with writing custom attack tools in Python, PHP, Golang and Bash
• Familiar with cloud services Azure/AWS/GCP/Oracle and Burp Suite usage

Responsibilities

• Collaborate with cross-functional teams (security, engineering, cloud and network operations).
• Create reports and communicate findings to various technical teams, architects and engineers.
• Create and communicate processes that could help engineering teams meet remediation goals.
• Create and verbally present your test findings in debrief meetings with the C-Suite or sponsors.
• Conduct penetration tests on cloud systems, applications and APIs to identify vulnerabilities.
• Assess cloud/application specific configurations, access controls, and encryption mechanisms.
• Validate and exploit security findings within web/thick client apps and cloud environments.
• Validate various app services, databases, Kubernetes, serverless functions, container instances, images and cloud storage blob/buckets for security issues.

Skills

Manual pen testing

Python

PHP

Golang

Bash

Windows/Linux CLI

XSS

SQLi

Cloud platforms

Education

Related degree/certificate

Tools

Burp Suite Enterprise

Job description

Stantec Consulting International Ltd. in Canada is seeking a Senior Ethical Hacker to conduct security assessments of web applications and cloud services, emulating real-world attacks using the MITRE ATT&CK framework.

The goal is to identify weaknesses and strengthen the security posture before threats exploit them. You will collaborate with security, engineering, and cloud teams, run cloud and API pentests, and present findings to executives in debriefs.