Senior Penetration Tester

OffSeq; North Glengarry; Hybrid; CAD 36,000 - 43,000; Full time

Benefits offered by this job

Source-code review

OT/ICS testing

Mobile/thick-client testing

Public Burp/Ghidra extensions

CVEs or CTF placings

Job summary

OffSeq is seeking a Senior Penetration Tester to lead complex engagements across web apps, infrastructure, cloud and more. You will develop exploits, craft targeted tools, and deliver detailed remediation reports while mentoring junior testers and helping shape our testing standards.

Requirements include 4+ years of pentest experience, OWASP Top 10 mastery, cloud proficiency (Azure/AWS/GCP) and OSCP or equivalent, plus strong English technical writing.

Qualifications

• Four+ years of penetration-testing or offensive-security experience, including leading engagements.
• Knowledge of OWASP Top 10, network and AD attacks, and at least one cloud platform (Azure/AWS/GCP).
• Fluency in at least one scripting language (Python/Bash/Ruby) for tooling/automation.
• Experience with Burp Suite, Nmap, Metasploit, BloodHound or equivalent tools.
• OSCP or equivalent skills and strong technical writing in English.

Responsibilities

• Scope and lead black-box and white-box penetration tests on web apps, APIs, networks, cloud environments and mobile apps.
• Develop exploits, scripts and tools to bypass controls and demonstrate concrete impact.
• Test manually and beyond automated scanners to map attack paths and business risk.
• Write precise, reproducible reports and guide clients through remediation.
• Shape testing methodology, tooling and quality standards across the team.
• Mentor junior testers and review their work.

Skills

Penetration testing

OWASP Top 10

Active Directory attacks

Cloud security (Azure/AWS/GCP)

Scripting (Python/Bash/Ruby)

Burp Suite

Nmap

Metasploit

BloodHound

OSCP

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

Careers/Senior Penetration Tester

03/07

Senior Penetration Tester

Lead complex penetration tests across web applications, infrastructure, cloud environments and other applications. Identify non-obvious vulnerabilities, develop proof-of-concept exploits and produce reports that support effective remediation.

• Offensive Security
• Remote / hybrid
• Baltics
• Full-time
• from €2,200 / mo

What you’ll do

• Scope and lead black-box and white-box penetration tests covering web applications, APIs, networks, cloud environments and mobile applications.
• Develop custom exploits, scripts and tools to bypass controls and demonstrate concrete impact.
• Test manually and in depth beyond automated scanners, combining individual findings into realistic attack paths and business risk.
• Write precise, reproducible reports and guide clients through remediation.
• Help shape testing methodology, tooling and quality standards across the team.
• Mentor junior testers and review their work.

What you bring

• At least four years of penetration-testing or offensive-security experience, including experience leading engagements.
• Strong across the OWASP Top 10, network and Active Directory attacks, and at least one cloud (Azure/AWS/GCP).
• Fluency in at least one scripting language, such as Python, Bash or Ruby, for custom tooling and automation.
• Practical experience with Burp Suite, Nmap, Metasploit, BloodHound and comparable tools.
• OSCP or equivalent skills, together with strong technical writing in English.

Additional advantages

• Source-code review
• OT/ICS, mobile or thick-client testing
• Public Burp/Ghidra extensions
• CVEs or CTF placings