About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Penetration Tester based in Canada. Join a forward-thinking fintech environment where cybersecurity plays a critical role.
Responsibilities
- Conduct manual penetration tests across applications, APIs, cloud environments, and critical systems
- Develop AI-assisted security tools and automation to expand testing coverage
- Design and implement testing strategies for AI-powered applications, LLMs, autonomous agents, and AI-generated code
- Review findings from SAST tools, remediate vulnerabilities, and refine detection rules
- Perform secure code reviews across web applications, APIs, and AWS infrastructure
- Build security tools and services within the application stack
- Support security reviews before production releases
- Collaborate with engineers and security stakeholders to explain vulnerabilities and prioritize remediation
Requirements
- At least 5 years of professional experience in application security, offensive security, penetration testing, or product security
- Hands-on expertise in penetration testing and secure code review across web applications, APIs, and AWS
- Understanding of AI and LLM security risks, including prompt injection and insecure agent tool usage
- Experience with Ruby, Python, TypeScript, or Go, and SSDLC practices
- Familiarity with AI tools for security testing and automation
- Strong communication skills
- Bachelor's degree in Computer Science or equivalent experience
- Nice to have: LLM red-teaming, OSCP/OSWE certifications, bug bounty experience, fintech background
Conditions
- Salary CAD $143,000–$183,000 per year
- Annual performance bonus target of 10%
- Medical, dental, and vision coverage
- RRSP matching program
- Flexible time off and paid parental leave
- Remote-first flexibility with office options
- Annual professional development budget
- Wellness reimbursement and volunteering opportunities