Senior Cloud Security Penetration Tester & Red Team Expert

Stantec Consulting International Ltd.; Vancouver; On-site; CAD 115,000 - 165,000; Full time

Benefits offered by this job

Health, dental, and vision plans

Wellness program

Employee stock purchase program

Tuition reimbursement

Job summary

Stantec Consulting International Ltd. is seeking a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks using the Mitre Attack Framework. The role focuses on uncovering vulnerabilities and assisting in proactive risk reduction.

You will collaborate with cross-functional teams, produce reports, and present findings to executives, with responsibilities spanning cloud, web, automation, and training initiatives.

Qualifications

• Minimum 5+ years in cybersecurity with offensive security/red team experience.
• Proficient with manual web/cloud penetration testing without relying on tools.
• Proficient writing custom attack tools in Python, PHP, Golang and Bash scripting.
• Proficient with interception proxies and Burp Suite Enterprise tool.
• Experience building attack automation systems and CI/CD pipelines.

Responsibilities

• Collaborate with security, engineering, cloud and network teams.
• Create and present test findings to Architects, Engineers and C-Suite.
• Conduct cloud and web penetration testing to identify vulnerabilities.
• Assess configurations, access controls and encryption in cloud environments.
• Architect automated workflows and enforce security baselines via Policy-as-Code.
• Develop content in internal training labs for security champions.
• Lead/participate in Red Team and purple team engagements.

Skills

Penetration testing

Python scripting

Burp Suite

Cloud security

Kubernetes

PowerShell/CLI

Automation tooling

Threat modeling

Executive communication

Education

Degree in Cybersecurity

Tools

Burp Suite Enterprise

Terraform

Ansible

Job description

Stantec Consulting International Ltd. is seeking a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks using the Mitre Attack Framework. The role focuses on uncovering vulnerabilities and assisting in proactive risk reduction.

You will collaborate with cross-functional teams, produce reports, and present findings to executives, with responsibilities spanning cloud, web, automation, and training initiatives.