Senior Ethical Hacker: Cloud & Web Penetration Lead

Stantec; Louisville (KY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental & vision plans

Tuition reimbursement

Paid holidays

Vacation (10–20 days/year)

Paid sick leave

401(k) plan

Employee stock purchase program

Job summary

Stantec seeks a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks using the MITRE ATT&CK framework. The role aims to uncover vulnerabilities and misconfigurations to prevent data breaches and strengthen security posture.

You will collaborate with cross-functional teams, perform cloud penetration tests, develop custom tooling, and present findings to executives.

Qualifications

• 5–7+ years in cybersecurity, with offensive security or red team experience preferred.
• Proficient in manual web/cloud penetration testing without relying on automated tools.
• Proficient in Python, PHP, Golang and Bash scripting for custom attack tooling.
• Experience with interception proxies and manual testing using Burp Suite Enterprise.
• Experience building automation pipelines and attack automation systems.
• Comfortable working in Windows or Linux command line environments.
• Experience with attacking public cloud services (Azure/AWS/GCP/Oracle).
• Strong communication skills for debriefs with stakeholders.

Responsibilities

• Collaborate with security, engineering, cloud and network teams.
• Prepare and present test findings to architects, engineers, and executives.
• Develop processes to help remediation goals and operations.
• Conduct penetration tests on cloud systems, apps and APIs.
• Architect automated workflows for security evaluation and assurance.
• Create content for training labs to keep teams current in offensive security.
• Lead internal Red/Purple team engagements and live hacking webinars.

Skills

Offensive Security

Red Team

Web/Cloud Penetration Testing

Python

Golang

Bash Scripting

Burp Suite

Cloud Platforms

Windows/Linux CLI

XSS/SQL Injection

Education

Related Degree or Certificate in Offensive Security / Application Security

Tools

Burp Suite Enterprise

Terraform

Ansible

PowerShell

Job description

Stantec seeks a Senior Ethical Hacker to conduct security assessments on web applications and cloud services, emulating real-world attacks using the MITRE ATT&CK framework. The role aims to uncover vulnerabilities and misconfigurations to prevent data breaches and strengthen security posture.

You will collaborate with cross-functional teams, perform cloud penetration tests, develop custom tooling, and present findings to executives.