Senior Penetration Testing Consultant

AprosSyber; Toronto; On-site; CAD 120,000 - 180,000; Full time

Job summary

AprosSyber in Toronto is seeking an experienced Senior Penetration Testing Consultant to lead and execute engagements across networks, applications, APIs, and cloud environments. You will mentor junior team members, perform red/purple team exercises, and provide actionable security recommendations with clear findings, risk ratings, and remediation guidance for Fortune 1000 clients.

Join a fast-paced offensive security team focused on staying ahead of evolving threats and delivering measurable

Qualifications

• 5+ years of hands-on penetration testing experience.
• Strong knowledge of networks, web apps, and cloud security.
• Proficient with Burp Suite, Cobalt Strike, and scripting.
• Familiarity with MITRE ATT&CK and OWASP Top 10.
• Certifications such as OSCP/OSCE/OSEP preferred.

Responsibilities

• Conduct penetration tests on networks, applications, APIs, and cloud environments.
• Perform red team & purple team exercises, social engineering, detection capability assessments.
• Document detailed reports with findings, risk ratings, and remediation guidance.
• Stay current on emerging threats, tools, and techniques in offensive security.
• Mentor junior team members and contribute to methodology development.

Skills

Penetration testing

Network protocols

Web application security

Cloud platforms (AWS, Azure, GCP)

Report writing

Client communication

Mentoring junior team members

Tools

Burp Suite

Cobalt Strike

Job description

About Us:

AprosSyber is a true first-responder Cybersecurity organization enabling clients to return to business rapidly, the right way, following a cyber-attack. We are a global market leader in ransomware post-breach remediation and cyber-attack first response. We deliver results that far surpass market statistics for cyber-extortion and ransomware events. Our team of cybersecurity professionals works with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses.

We are seeking an experienced Senior Penetration Testing Consultant to join our offensive security team. In this role, you will lead and execute penetration testing engagements, assess complex environments, and provide actionable security recommendations to protect our clients against evolving threats. You will work closely with stakeholders to identify vulnerabilities, misconfigurations, exploit weaknesses, and recommend appropriate actions to mitigate the findings.

Key Responsibilities

• Conduct penetration tests on networks, applications, APIs, and cloud environments.


• Perform red team & purple team exercises, social engineering, detection capability assessments.


• Document detailed reports with findings, risk ratings, and remediation guidance.


• Stay current on emerging threats, tools, and techniques in offensive security.


• Mentor junior team members and contribute to methodology development.

Required Qualifications

• 5+ years of hands-on penetration testing experience, preferably in professional services.


• Strong knowledge of network protocols, web application security, and cloud platforms (AWS, Azure, GCP).


• Proficiency with tools such as Burp Suite, Cobalt Strike, and custom scripts.


• Ability to develop custom exploits and scripts in Python, PowerShell, or Bash.


• Knowledge of the MITRE ATT&CK framework and OWASP Top 10.


• Certifications such as OSCP, OSCE, OSEP, or equivalent highly preferred.


• Team player: you collaborate with your colleagues for peer review and to help them.


• Excellent report writing and client communication skills.

AprosSyber is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the AprosSyber team! While we welcome all applicants, only those who are selected for an interview will be contacted.