Senior Offensive Security Lead — Penetration Testing

AprosSyber; Toronto; On-site; CAD 120,000 - 180,000; Full time

Job summary

AprosSyber in Toronto is seeking an experienced Senior Penetration Testing Consultant to lead and execute engagements across networks, applications, APIs, and cloud environments. You will mentor junior team members, perform red/purple team exercises, and provide actionable security recommendations with clear findings, risk ratings, and remediation guidance for Fortune 1000 clients.

Join a fast-paced offensive security team focused on staying ahead of evolving threats and delivering measurable

Qualifications

• 5+ years of hands-on penetration testing experience.
• Strong knowledge of networks, web apps, and cloud security.
• Proficient with Burp Suite, Cobalt Strike, and scripting.
• Familiarity with MITRE ATT&CK and OWASP Top 10.
• Certifications such as OSCP/OSCE/OSEP preferred.

Responsibilities

• Conduct penetration tests on networks, applications, APIs, and cloud environments.
• Perform red team & purple team exercises, social engineering, detection capability assessments.
• Document detailed reports with findings, risk ratings, and remediation guidance.
• Stay current on emerging threats, tools, and techniques in offensive security.
• Mentor junior team members and contribute to methodology development.

Skills

Penetration testing

Network protocols

Web application security

Cloud platforms (AWS, Azure, GCP)

Report writing

Client communication

Mentoring junior team members

Tools

Burp Suite

Cobalt Strike

Job description

AprosSyber in Toronto is seeking an experienced Senior Penetration Testing Consultant to lead and execute engagements across networks, applications, APIs, and cloud environments. You will mentor junior team members, perform red/purple team exercises, and provide actionable security recommendations with clear findings, risk ratings, and remediation guidance for Fortune 1000 clients.

Join a fast-paced offensive security team focused on staying ahead of evolving threats and delivering measurable