Publié il y a 58 mois
Penetration Tester
@ Software Secured
Ottawa, Ontario
En bref
Software Secured is hiring a full-time Penetration Tester to manually test web applications, APIs, mobile apps and network infrastructure for clients. The role covers the full engagement cycle from scoping through reporting, client readout and retest, plus security design reviews and mentoring junior testers. Remote work anywhere in Canada is offered, with Ottawa office access optional, and profit-sharing of 5 to 12 percent of base salary.
Responsabilités :
- Run manual penetration tests on web, API, mobile and network targets
- Produce confirmed, exploitable findings with actionable remediation guidance
- Present findings to client engineering and security teams
- Contribute to security design reviews and threat modelling
- Mentor junior testers and improve methodology and tooling
Résumé des exigences :
- 2+ years of hands-on manual penetration testing
- Ability to run engagements end to end with minimal oversight
- Software development background in Python, .NET, Ruby or Java
- Strong written and verbal communication skills
- Located in Canada and eligible to work
Outils et compétences
Avantages mentionnés
Source et dates
Site carrière / système de candidatures · breezy
- Date publiée par l’employeur
- 2022-02-02
- Première détection par notre source
- 2026-10-09
- Mise à jour du dossier source
- 2026-10-16
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Intermédiaire |
| Domaine | Assurance qualité |
| Expérience | 2 an(s) et plus |
| Heures par semaine | 40 (estimé) |
| Milieu de travail | Domicile, Chez les clients |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Langues | English |
| Permis et certifications | OSCP, OSCP+, GWAPT |
| Avantages mentionnés | Congés payés généreux, Congé parental généreux, Allocation de télétravail |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Software Secured
Profil d’entreprise sauvegardé
Renseignements historiques provenant d’un profil The Jobs API sauvegardé (champs LinkedIn/Crunchbase). Ils ne sont pas vérifiés en temps réel; les chiffres peuvent avoir changé. Les valeurs manquantes restent inconnues.
Our penetration testing and actionable reports help you identify, understand and solve security gaps faster.
Description complète de l’entreprise
Providing the quality of the biggest names in security without the price tag and complications. Our penetration testing and augmented security services help make your products compliant, reduce the likelihood of a cyber breach and give your clients confidence that their data is secure. Our pentesting meets the requirements set out by the following frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS (v3.2 & 4.0), GDPR, NIST CSF, NIST 800-115, HITRUST CSF and FedRAMP.
- Abonnés LinkedIn
- 2 566
- Personnes associées sur LinkedIn
- 28
- Bureaux déclarés
- 301 Moodie Dr, Unit 108, Ottawa, Ontario K2H 9C4, CA
- Catégories d’activité
- Cyber Security
- SaaS
- Software
- Internet & Web Services
- Information Technology
- Autres noms enregistrés
- Software Secured
- Spécialités
- Security Code Review
- Software Security Assurance Evaluation and Implementation
- Writing Secure Java Code Training
- Web Application Penetration Testing
- Writing Secure .NET Code Training
- Security Architecture
- Mobile Application Penetration Testing
- Software Security
- Security Training
- Penetration Testing
- Penetration Testing as a Service
- PTaaS
- OWSAP Top 10
- Application Security
- and Security Solutions for SaaS Companies
- Le profil indique une agence de recrutement
- Non
- Investissement total déclaré
- 0
La devise et la date d’observation ne sont pas fournies; ce n’est ni une valorisation actuelle ni une ronde de financement.
Providing the quality of the biggest names in security without the price tag and complications. Our penetration testing and augmented security services help make your products compliant, reduce the likelihood of a cyber breach and give your clients confidence that their data is secure. Our pentesting meets the requirements set out by the following frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS (v3.2 & 4.0), GDPR…
| Champ | Valeur |
|---|---|
| Secteur | Security and Investigations |
| Taille | 11-50 employees |
| Siège social | Ottawa, Ontario |
| Type d’organisation | Privately Held |
| Fondée en | 2009 |
| Spécialités | Security Code ReviewSoftware Security Assurance Evaluation and ImplementationWriting Secure Java Code TrainingWeb Application Penetration TestingWriting Secure .NET Code TrainingSecurity ArchitectureMobile Application Penetration TestingSoftware SecuritySecurity TrainingPenetration Testing |
| Offres sur Jobsy | 3 |
| Voir la page |
Software Secured is a leading Penetration Testing as a Service company, with a head office in beautiful Ottawa, Canada. We help software development teams get ahead of hackers using a suite of services and products.
Our team of pentesters is seeking a pentester to join us and help secure a few hundred additional applications.
As a Pentester at Software Secured, you will have the opportunity to help our clients secure their mission-critical applications. This includes performing security code review, web, mobile, and network security tests. Help clients with security design reviews, threat modelling, and remediation strategies.
What You'll Do
- Run manual penetration tests across web applications, APIs, mobile apps, and network infrastructure — from scoping through testing, reporting, client readout, and retest
- Produce findings that are manually confirmed and exploitable, with remediation guidance a developer can act on without a follow-up call
- Handle nuanced test cases beyond the standard checklist: business logic flaws, authorization edge cases, vulnerability chaining, and environment-specific attack paths
- Present findings directly to client engineering teams and security leads — explaining what was found, why it matters, and how to fix it
- Contribute to security design reviews and threat modelling engagements earlier in the SDLC
- Mentor junior testers on test execution and report quality; contribute to methodology improvements, tooling, and internal playbooks
- Develop domain depth in one or more service areas (web, network, mobile, code review) through our Domain Expertise Program — with formal recognition and stipend for engineers who build expertise that makes the whole team stronger
What We're Looking For
- 2+ years of hands-on manual penetration testing — not scanner-assisted, manual
- Demonstrated ability to run standard engagements end-to-end with minimal oversight: scope, test, report, readout, retest
- Finds that go beyond OWASP Top 10 basics — business logic issues, complex auth flaws, chained vulnerabilities
- Reports that are client-ready with low rework: technically accurate, clearly written, correctly risk-rated
- Software development background in one or more of Python, .NET, Ruby, or Java — you understand how the thing was built, not just how to break it
- Strong communication skills in both directions: writing that doesn't require a translator and calls where you can hold your own in front of an engineering team
- Located in Canada and eligible to work (citizen, permanent resident, or valid work visa)
Nice to Have
- OSCP, OSCP+, or GWAPT
- Experience across multiple service areas (web + mobile, or web + network)
- Familiarity with compliance frameworks that drive our clients' security programs: SOC 2, ISO 27001, PCI DSS, HIPAA
What we are offering:
🤑 Competitive base salary
🍁 Work remotely anywhere in Canada (you're welcome to work in the Ottawa office when you'd like the option).
🌍 Work remotely from anywhere in the world for up to 2 months per year.
💰 Yearly profit-sharing between 5 - 12% of your base salary, based on your performance.
💸 Perks such as: monthly UberEats budget, annual home office stipend.
🌴 3 weeks of vacation to start. Additionally, the whole company is off for the week between Christmas and the New Year.
🍼 Parental, bereavement and child loss leave.
🏥 You will receive a great health benefits package (includes dental, vision, practitioners, etc.).
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.