Senior Penetration Tester — Remote/Hybrid (Baltics)

OffSeq; North Glengarry; Hybrid; CAD 36,000 - 43,000; Full time

Benefits offered by this job

Source-code review

OT/ICS testing

Mobile/thick-client testing

Public Burp/Ghidra extensions

CVEs or CTF placings

Job summary

OffSeq is seeking a Senior Penetration Tester to lead complex engagements across web apps, infrastructure, cloud and more. You will develop exploits, craft targeted tools, and deliver detailed remediation reports while mentoring junior testers and helping shape our testing standards.

Requirements include 4+ years of pentest experience, OWASP Top 10 mastery, cloud proficiency (Azure/AWS/GCP) and OSCP or equivalent, plus strong English technical writing.

Qualifications

• Four+ years of penetration-testing or offensive-security experience, including leading engagements.
• Knowledge of OWASP Top 10, network and AD attacks, and at least one cloud platform (Azure/AWS/GCP).
• Fluency in at least one scripting language (Python/Bash/Ruby) for tooling/automation.
• Experience with Burp Suite, Nmap, Metasploit, BloodHound or equivalent tools.
• OSCP or equivalent skills and strong technical writing in English.

Responsibilities

• Scope and lead black-box and white-box penetration tests on web apps, APIs, networks, cloud environments and mobile apps.
• Develop exploits, scripts and tools to bypass controls and demonstrate concrete impact.
• Test manually and beyond automated scanners to map attack paths and business risk.
• Write precise, reproducible reports and guide clients through remediation.
• Shape testing methodology, tooling and quality standards across the team.
• Mentor junior testers and review their work.

Skills

Penetration testing

OWASP Top 10

Active Directory attacks

Cloud security (Azure/AWS/GCP)

Scripting (Python/Bash/Ruby)

Burp Suite

Nmap

Metasploit

BloodHound

OSCP

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

OffSeq is seeking a Senior Penetration Tester to lead complex engagements across web apps, infrastructure, cloud and more. You will develop exploits, craft targeted tools, and deliver detailed remediation reports while mentoring junior testers and helping shape our testing standards.

Requirements include 4+ years of pentest experience, OWASP Top 10 mastery, cloud proficiency (Azure/AWS/GCP) and OSCP or equivalent, plus strong English technical writing.