Senior Ethical Hacker

Skillhub Solutions Inc.; Toronto; On-site; CAD 105,000 - 158,000; Full time

Job summary

Stantec in Toronto, Ontario, is seeking a Senior Ethical Hacker to assess web applications and cloud services, emulate real-world attacks, and identify vulnerabilities and security risks. You will conduct penetration tests across cloud systems, apps, APIs, and infrastructure, including Kubernetes and containers.

Responsibilities include developing automated security evaluation workflows, participating in red-team engagements, and documenting findings to help engineering teams remediate risks.

Qualifications

• 5+ years of cybersecurity experience; red-team preferred.
• Strong manual web and cloud pentesting; ability to write custom tools.
• Experience with cloud services, scripting, containers, and communicating findings to senior stakeholders.
• Related degree or certificate preferred; certifications welcomed.

Responsibilities

• Penetration tests on cloud systems, apps, APIs, and infrastructure, incl. Kubernetes and containers.
• Assess configurations, access controls, and encryption; validate and exploit findings.
• Develop automated security evaluation workflows and policy-as-code controls.
• Participate in red-team and purple-team engagements and security training.
• Document findings and help engineering teams meet remediation goals.

Skills

Penetration testing

Cloud security

Kubernetes

Attack automation

Scripting

Stakeholder communication

Education

Related degree

Certifications

Tools

Custom tooling

Job description

Toronto, ON Full-time CA$105,400 - CA$164,600 / year

Stantec is hiring a Senior Ethical Hacker to assess web applications and cloud services, emulate real-world attacks, and identify vulnerabilities and security risks.

Responsibilities

• Conduct penetration tests on cloud systems, applications, APIs, and infrastructure, including Kubernetes, containers, databases, and serverless services.
• Assess configurations, access controls, and encryption; validate and exploit security findings.
• Develop automated security evaluation workflows, policy-as-code controls, and custom security tooling and infrastructure extensions.
• Participate in internal red-team and purple-team engagements and support security training.
• Document and present findings, agree on rules of engagement, and help engineering teams meet remediation goals.

Qualifications

• At least 5 years of relevant cybersecurity experience; offensive security or red-team experience is preferred.
• Strong manual web and cloud penetration-testing skills, with experience writing custom tools and building attack automation.
• Experience with cloud services, scripting, containers, and communicating findings to technical teams and senior stakeholders.
• A related degree or certificate is preferred. Relevant certifications and AI/LLM penetration-testing experience are also preferred.

Compensation and details

Annual pay ranges from $105,400 to $158,100 for locations outside the Lower Mainland in BC and various Ontario locations, and from $114,600 to $164,600 for the Lower Mainland, GTA, and Ottawa. The role is full-time, with primary location listed as Toronto, Ontario, and Vancouver, British Columbia, also listed as a location.