Senior Ethical Hacker: Cloud & Web App Security

Stantec; Mississauga; On-site; CAD 105,000 - 165,000; Full time

Benefits offered by this job

Health, dental and vision plans

Wellness program

Tuition reimbursement

Employee stock purchase program

Job summary

Stantec is seeking a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks using the Mitre Attack Framework. The role aims to uncover vulnerabilities, misconfigurations, and risks to prevent breaches and improve security posture.

Responsibilities include collaborating with security, engineering and cloud teams, delivering clear findings to executives, and building automated security workflows.

Qualifications

• Minimum 5-7+ years in cybersecurity with offensive security experience preferred.

Responsibilities

• Collaborate with cross-functional teams including security, engineering, cloud and network operations.
• Create reports and communicate findings to technical teams and executives.
• Develop processes to help engineering meet remediation goals.
• Present test findings in debrief meetings with C-Suite or sponsors.
• Penetration test cloud systems, applications and APIs to identify vulnerabilities.
• Assess cloud configurations, access controls, and encryption mechanisms.
• Validate findings within web and cloud environments and exploit where appropriate.
• Ensure coverage of app services, databases, Kubernetes, serverless functions, containers, and cloud storage for security issues.
• Architect automated workflows for security evaluation and assurance processes.
• Establish policy-based security baseline controls via Policy-as-Code.
• Engineer custom Python, Terraform, and Ansible extensions for security use cases.
• Populate internal training content and run live hacking webinars for teams.
• Conduct internal Red Team engagements and purple team engagements.

Skills

Security testing

Threat modeling

Python

Golang

Bash scripting

Burp Suite

Manual testing

Cloud security

Windows/Linux CLI

Communication

Reporting

Education

Related Degree or Certificate in Offensive Security/AI Red Teaming or Application Security

Tools

Python

Terraform

Ansible

Burp Suite Enterprise

Kubernetes

Azure/AWS/GCP/Oracle cloud

Job description

Stantec is seeking a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks using the Mitre Attack Framework. The role aims to uncover vulnerabilities, misconfigurations, and risks to prevent breaches and improve security posture.

Responsibilities include collaborating with security, engineering and cloud teams, delivering clear findings to executives, and building automated security workflows.