Senior Secure Code Reviewer & Penetration Tester

TD; Toronto; On-site; CAD 82,000 - 115,000; Full time

Job summary

TD is seeking a skilled Secure Code Reviewer and Penetration Tester to join our Toronto team. You will identify and exploit vulnerabilities in applications and infrastructure, performing secure code reviews and thorough penetration testing to enhance our cybersecurity posture.

Responsibilities include training developers on secure coding, developing remediation content, and collaborating with cross-functional teams.

Qualifications

• Experience in pen testing and vulnerability assessments on systems, networks, and applications.
• Proven experience in secure code review.
• Expertise with a range of pentesting tools and techniques (Burp Suite, Metasploit, Nmap).
• Understanding of web/mobile apps and databases.
• Experience in identifying vulnerabilities in Java, C#, PHP, Python, Perl, C/C++, SQL.
• Hands-on with static analysis using SAST tools (Skyk, Checkmarx, AppScan Source, Veracode, Coverity, Fortify, SonarQube).
• OSCP or similar certification is a plus.

Responsibilities

• Conduct secure code reviews and penetration testing on applications and infrastructure.
• Identify vulnerabilities and provide actionable remediation guidance.
• Train developers on secure coding practices and remediation.
• Lead release-based testing and mitigation reviews.
• Collaborate with developers and teams to assess risks and mitigations.

Skills

Secure code review

Penetration testing

Analytical thinking

Communication skills

Team collaboration

Education

University degree

Information security certification (asset)

Tools

Burp Suite

Metasploit

Nmap

Skyk

Checkmarx

AppScan Source

Veracode

Coverity

Fortify

SonarQube

ServiceNow

Job description

TD is seeking a skilled Secure Code Reviewer and Penetration Tester to join our Toronto team. You will identify and exploit vulnerabilities in applications and infrastructure, performing secure code reviews and thorough penetration testing to enhance our cybersecurity posture.

Responsibilities include training developers on secure coding, developing remediation content, and collaborating with cross-functional teams.