Senior Security Testing Engineer — Cloud, API & Infra

Myticas Consulting Inc.; Ottawa; On-site; CAD 110,000 - 140,000; Full time

Job summary

Myticas Consulting Inc. is seeking a Senior Cybersecurity Test Engineer to lead and execute security testing across applications, infrastructure, cloud environments, APIs, and system integrations.

You will design, implement, and perform comprehensive security testing to identify vulnerabilities and validate controls throughout the SDLC, collaborating with cybersecurity, development, and cloud teams to ensure robust security practices.

Qualifications

• 8+ years of experience in cybersecurity testing, security engineering, application security, penetration testing, or related disciplines.
• Strong hands‑on experience executing security testing across applications, infrastructure, cloud environments, and integrations.
• Experience with threat modeling methodologies such as STRIDE, MITRE ATT&CK, OWASP Threat Modeling, or equivalent frameworks.
• Strong knowledge of cloud security testing within AWS, Azure, and/or GCP environments.
• Experience testing APIs, identity platforms, IAM solutions, authentication mechanisms, and authorization controls.
• Strong understanding of application, infrastructure, network, and integration security principles.
• Experience with security testing tools, vulnerability scanning, and automated testing frameworks.
• Hands‑on experience performing vulnerability assessments, security control validation, and remediation testing.

Responsibilities

• Plan, design, and execute security testing activities across applications, infrastructure, cloud environments, APIs, and system integrations.
• Develop and execute threat‑based security test scenarios using STRIDE, MITRE ATT&CK, and OWASP testing approaches.
• Perform security testing and validation for IAM, APIs/microservices, data flows, cloud environments, and infrastructure.
• Conduct manual and automated security testing, including vulnerability assessments and security control validation.
• Execute application security testing, API security testing, cloud security testing, and infrastructure security assessments.
• Identify, document, and report vulnerabilities, security gaps, and control weaknesses, and provide remediation recommendations.
• Validate remediation efforts through retesting and verification activities.
• Develop and maintain reusable security test cases, scripts, automation frameworks, and testing procedures.
• Support security risk assessments, investigations, incident reviews, and security escalations.
• Collaborate with development, cloud, infrastructure, architecture, and cybersecurity teams to integrate security testing throughout the SDLC and DevSecOps processes.
• Generate security testing reports, technical findings, risk assessments, and testing metrics for stakeholders.
• Contribute to the development and continuous improvement of security testing standards, procedures, and best practices.
• Mentor junior security testers and provide guidance on security testing methodologies and tools.

Skills

Cybersecurity testing

Security engineering

Penetration testing

Threat modeling

Cloud security testing

APIs security

Vulnerability assessments

Automation testing

Tools

Burp Suite

OWASP ZAP

Nessus

Qualys

Fortify

Checkmarx

Veracode

Kubernetes security tools

Job description

Myticas Consulting Inc. is seeking a Senior Cybersecurity Test Engineer to lead and execute security testing across applications, infrastructure, cloud environments, APIs, and system integrations.

You will design, implement, and perform comprehensive security testing to identify vulnerabilities and validate controls throughout the SDLC, collaborating with cybersecurity, development, and cloud teams to ensure robust security practices.