Senior Cloud & Web Penetration Tester

Stantec; Hamilton; On-site; CAD 105,000 - 165,000; Full time

Benefits offered by this job

Health, dental, and vision plans

Wellness and retirement programs

Job summary

Stantec is seeking a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks to identify weaknesses and proactively reduce risk. You will work with cross-functional teams to improve security posture and prevent data breaches.

The role emphasizes hands-on offensive security, development of custom tools, and reporting findings to senior stakeholders.

Qualifications

• Minimum 5-7+ years in cybersecurity (Offensive Security, Red Team preferred).
• Proficient with manual web/cloud penetration testing without tools.
• Proficient writing custom attack tools in Python, PHP, Golang and Bash scripting.
• Proficient with interception proxies and Burp Suite Enterprise tool.

Responsibilities

• Collaborate with cross-functional teams (security, engineering, cloud, network).
• Create reports and communicate findings to technical teams and executives.
• Develop processes to help remediation goals.
• Present test findings in debrief meetings with C-Suite or sponsors.
• Pen test cloud systems, apps, and APIs to identify vulnerabilities.
• Assess cloud configurations, access controls, and encryption mechanisms.
• Validate security findings in web and cloud environments.
• Engage in Red/Blue team activities and knowledge sharing.

Skills

Penetration testing

Red Team

Threat modeling

Cloud security

Education

Related Degree or Certificate in Offensive Security/AI

Tools

Burp Suite Enterprise

Python

Terraform

Ansible

PowerShell

Job description

Stantec is seeking a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks to identify weaknesses and proactively reduce risk. You will work with cross-functional teams to improve security posture and prevent data breaches.

The role emphasizes hands-on offensive security, development of custom tools, and reporting findings to senior stakeholders.