Senior Security Engineer (Offensive Security)

🇨🇦 Toronto, Canada Hybrid3+ yearsPosted 11 d ago

Required Candidate location: Canada

* Approach security from an adversarial perspective, continuously evaluating the company's applications, infrastructure, and processes to identify weaknesses before external actors do. * Design and conduct internal red team exercises that simulate realistic attack scenarios, then work closely with stakeholders to ensure findings are remediated effectively. * Perform end-to-end penetration testing engagements, documenting attack paths, business impact, and actionable recommendations. * Strengthen software supply chain security by improving dependency management, CI/CD protections, credential handling, and development workflows. * Establish and maintain security controls for developer endpoints, including device hardening, access management, secret storage, and secure tooling standards. * Lead security investigations and incident response efforts, from initial triage through root cause analysis and long-term remediation. * Develop proactive threat-hunting initiatives and maintain playbooks that improve organizational readiness. * Help cultivate a security-first culture through phishing simulations, security awareness initiatives, and practical guidance for engineering teams. * Collaborate with Engineering, SRE, and leadership teams to incorporate security considerations into architecture, product decisions, and technical roadmaps. * Stay current on emerging threats, vulnerability disclosures, attack techniques, and industry best practices, bringing relevant insights back into the organization.

Python3 Year(s)Owasp3 Year(s)Pentest3 Year(s)Aws3 Year(s)

React.jsDjango

Languages required

English

Why this role?

"We're a lean team that moves quickly and takes ownership seriously. If you've ever felt frustrated by layers of approval slowing down good ideas, you'll appreciate how we operate. We build products that become mission-critical in real-world moments: the kiosk welcoming thousands of attendees, the operations dashboard event teams rely on behind the scenes, and the badge that prints instantly when someone arrives.

Success often goes unnoticed because everything simply works. Failure is immediately visible. That level of responsibility creates meaningful engineering challenges and opportunities to make a direct impact. We're looking for someone who wants to solve important problems, influence how security is approached across the organization, and help build products people genuinely enjoy using."

* 3+ years of experience in offensive security, penetration testing, red teaming, or a related security discipline. * Deep understanding of web application and API security, including common vulnerabilities, authentication and authorization weaknesses, and exploitation techniques. * Familiarity with modern supply chain threats such as dependency confusion, package compromise, typosquatting, and malicious development tooling. * Working knowledge of cloud-native environments and modern application stacks, particularly AWS-based systems and web technologies. * Ability to review application code, understand deployment architectures, and identify security risks throughout the software development lifecycle. * Strong scripting and automation skills using Python, Bash, or similar languages. * Hands-on experience with industry-standard offensive security tools, along with the ability to develop custom solutions when needed. * A self-directed mindset with the ability to prioritize work, manage initiatives independently, and drive remediation efforts to completion. * Excellent written and verbal communication skills, with the ability to tailor technical findings for both engineering teams and business stakeholders. * High standards of professionalism, discretion, and ethical conduct when handling sensitive information.

* Certifications such as OSCP, CRTO, GPEN, or equivalent offensive security credentials. * Experience securing SaaS platforms, cloud infrastructure, or high-availability production environments.

🩺 Comprehensive employer-paid health benefits

🚇 Convenient Toronto office location with direct TTC access

🚀 Opportunities to grow into technical leadership roles as the organization scales

🍜 Team lunches, learning sessions, and regular social events

🏗️ High-autonomy environment where individual contributions have immediate and visible impact

Includes 6 screening questions.

🏥 Medical Insurance🏥 Dental Insurance🏥 Paid vacation

Sign up to apply

* Jobs

* Talent Pool

* Settings * Login

* Menu

* Jobs

* Talent Pool

* Sign in

* Sign up

* Appearance * Light * Semi-Dark * Dark * System

* * * *

* General Settings * Appearance * Light * Semi-Dark * Dark * System * Container Width * Boxed Layout * Fixed * Fluid

Lost connection

The internet blinked. We’re catching up.

Trying to reconnect automatically.

Trying to reconnect automatically in 0s. Attempt 0 of 0.

Trying to reconnect.

Couldn’t reconnect. Try again or reload the page.

We couldn’t restore the connection.

This session was paused by the server.

We couldn’t resume this session.

This session is no longer available. Reload the page to continue.

Try again Reload page

Resume Reload page

Reload page

An error has occurred. This application may no longer respond until reloaded.Reload 🗙