Senior Security Testing Engineer - Cloud, API & Apps

Myticas Consulting; Ottawa; On-site; CAD 110,000 - 140,000; Full time

Job summary

Myticas Consulting seeks a Senior Cybersecurity Test Engineer to lead security testing across apps, infrastructure, cloud, APIs, and integrations. You will design, implement, and perform comprehensive tests to identify vulnerabilities and validate controls within the SDLC and DevSecOps processes.

You will collaborate with cybersecurity, development, cloud and infrastructure teams, mentor junior testers, develop reusable test assets, and report findings with remediation guidance to stakeholders.

Qualifications

• 8+ years in cybersecurity testing or related fields.
• Hands-on security testing across applications, infrastructure, cloud and integrations.
• Experience with threat modeling methodologies like STRIDE, MITRE ATT&CK, OWASP.
• Cloud security testing in AWS/Azure/GCP environments.
• Experience testing APIs, IAM, authentication and authorization controls.
• Strong knowledge of security principles and risk management.

Responsibilities

• Plan, design, and execute security testing across applications, infrastructure, cloud environments, APIs, and system integrations.
• Develop and execute threat-based security test scenarios using STRIDE, MITRE ATT&CK, and OWASP testing approaches.
• Perform security testing and validation for IAM, APIs, data flows, cloud, applications and infrastructure.
• Conduct manual and automated security testing, including vulnerability assessments and security control validation.
• Execute application security testing, API security testing, cloud security testing, and infrastructure security assessments.
• Identify, document, and report vulnerabilities, security gaps, and control weaknesses, and provide remediation recommendations.
• Validate remediation efforts through retesting and verification activities.
• Develop and maintain reusable security test cases, scripts, automation frameworks, and testing procedures.
• Support security risk assessments, investigations, incident reviews, and security-related escalations.
• Collaborate with development, cloud, infrastructure, architecture, and cybersecurity teams to integrate security testing throughout the SDLC and DevSecOps processes.
• Generate security testing reports, technical findings, risk assessments, and testing metrics for stakeholders.
• Contribute to the development and continuous improvement of security testing standards, procedures, and best practices.
• Mentor junior security testers and provide guidance on security testing methodologies and tools.

Skills

Cybersecurity testing

Threat modeling

API security testing

Cloud security testing

Vulnerability assessments

Remediation testing

Documentation & reporting

Mentoring

Tools

Burp Suite

OWASP ZAP

Nessus

Qualys

Fortify

Checkmarx

Veracode

Job description

Myticas Consulting seeks a Senior Cybersecurity Test Engineer to lead security testing across apps, infrastructure, cloud, APIs, and integrations. You will design, implement, and perform comprehensive tests to identify vulnerabilities and validate controls within the SDLC and DevSecOps processes.

You will collaborate with cybersecurity, development, cloud and infrastructure teams, mentor junior testers, develop reusable test assets, and report findings with remediation guidance to stakeholders.