Senior Cloud & Web Penetration Tester

Skillhub Solutions Inc.; Toronto; On-site; CAD 105,000 - 158,000; Full time

Job summary

Stantec in Toronto, Ontario, is seeking a Senior Ethical Hacker to assess web applications and cloud services, emulate real-world attacks, and identify vulnerabilities and security risks. You will conduct penetration tests across cloud systems, apps, APIs, and infrastructure, including Kubernetes and containers.

Responsibilities include developing automated security evaluation workflows, participating in red-team engagements, and documenting findings to help engineering teams remediate risks.

Qualifications

• 5+ years of cybersecurity experience; red-team preferred.
• Strong manual web and cloud pentesting; ability to write custom tools.
• Experience with cloud services, scripting, containers, and communicating findings to senior stakeholders.
• Related degree or certificate preferred; certifications welcomed.

Responsibilities

• Penetration tests on cloud systems, apps, APIs, and infrastructure, incl. Kubernetes and containers.
• Assess configurations, access controls, and encryption; validate and exploit findings.
• Develop automated security evaluation workflows and policy-as-code controls.
• Participate in red-team and purple-team engagements and security training.
• Document findings and help engineering teams meet remediation goals.

Skills

Penetration testing

Cloud security

Kubernetes

Attack automation

Scripting

Stakeholder communication

Education

Related degree

Certifications

Tools

Custom tooling

Job description

Stantec in Toronto, Ontario, is seeking a Senior Ethical Hacker to assess web applications and cloud services, emulate real-world attacks, and identify vulnerabilities and security risks. You will conduct penetration tests across cloud systems, apps, APIs, and infrastructure, including Kubernetes and containers.

Responsibilities include developing automated security evaluation workflows, participating in red-team engagements, and documenting findings to help engineering teams remediate risks.