Jobs in Canada

Group jobs by employerSave search & get alerts

Added 2 months ago
Systems Analyst
CAA Club Group
Thornhill, ON
Manage and troubleshoot components such as IIS, Tomcat and cloud-native services
Added 2 months ago
C
Product Owner, AI Factory
Cogeco
Burlington, ON · Montreal, QC
- Full-time
Cloud & Platform Architecture: Solid grasp of cloud-native architectures (GCP preferred), API management, event-driven architecture, and secure microservices design.
Added 1 month ago
C
Salesforce Solution Architect
Cognizant
Toronto, ON
- Full-time
…Salesforce implementations with a strong focus on Financial Services Cloud (FSC) and industry…
Added 2 months ago
S
Senior Full Stack Developer
Syntronic
Ottawa, ON
- Full-time
Syntronic Ottawa Software Design Studio is looking for an experienced Senior Full Stack Developer who can design, build, and deliver modern software solutions across varied customer…
Added 2 months ago
S
Intermediate Full Stack Developer
Syntronic
Ottawa, ON
- Full-time
Syntronic Ottawa Software Design Studio is looking for a versatile and motivated Intermediate Full Stack Developer to build modern software solutions across a variety of customer projects…
Added 2 months ago
D
Manager, Product Engineering & Development - Full-Stack Builder
Deloitte
Toronto, ON
- Full-time
Custom development: architect and build cloud-native applications across the full technology stack, leading modernization and product engineering from pursuit through production.
Added 2 months ago
NP
Senior AI Developer (Coming Soon!)
Nuclear Promise X
Remote, Canada
- $130,000 to $160,000 CAD / year
- Full-time
- Remote
Write and maintain Python code daily, using Azure’s AI SDK and cloud-native services.
Added 2 months ago
Software Development Engineer, Ring Cloud Connectivity Org
Amazon
Toronto, ON
Ring is seeking a Software Development Engineer to join the Cloud Connectivity organization in Toronto, where you'll build and deliver large-scale, customer-facing platforms that power how…
Added 2 months ago
Software Development Engineer, Ring Cloud Connectivity Org
Amazon
Toronto, ON
Ring is seeking a Mobile Software Development Engineer to join the Cloud Connectivity organization in Toronto, where you'll build and deliver customer-facing mobile experiences that power…
Added 2 months ago
I
Data Cloud Platform Engineer (DBA) (2)
Intralot
Vancouver, BC
- Full-time
Must possess valid documentation to establish identity and Canadian employment eligibility
Added 2 months ago
E
Senior Full Stack Engineer
Eleven-X
Waterloo, ON
- Full-time
Experience with Docker, Kubernetes (K8s), or cloud-native operational practices.
Added 2 months ago
E
Senior Backend Engineer
Eleven-X
Waterloo, ON
- Full-time
Docker, Kubernetes (K8s), or cloud-native operational experience.
Added 2 months ago
BC
Data Cloud Platform Engineer (DBA) (2)
Bally’s Corporation
Vancouver, BC
- Full-time
Must possess valid documentation to establish identity and Canadian employment eligibility
Added 2 months ago
BI
Data Cloud Platform Engineer (DBA) (2)
BALLY’S INTRALOT SA
Vancouver, BC
- Full-time
Must possess valid documentation to establish identity and Canadian employment eligibility
Added 2 months ago
RC
Principal Product Manager, Portfolio Security
Ribbon Communications
Ottawa, ON
- $150,000 to $200,000 CAD / year
- Full-time
Expertise in secure software development, cloud-native platforms, vulnerability management, and software supply chain security.
Added 2 months ago
C
ETL Consultant (Hybrid)
Cognizant
Halifax, NS
- Full-time
Working knowledge of cloud platforms (AWS, Azure, or GCP) and their native services.
Added 2 months ago
AW
Senior Software Development Manager, S3
Amazon Web Services (AWS)
Vancouver, BC
- Full-time
Amazon S3 Tables is the first cloud object store with built-in Apache Iceberg support, purpose-built for storing and querying tabular data at massive scale. It is fully managed,…
Added 2 months ago
MS
AI-Native Software Developer II
Motorola Solutions
Vancouver, BC
- Full-time
We are seeking an Intermediate Software Developer experienced in development within on-premise or cloud development environments who can build product features primarily by directing AI…
Added 2 months ago
ES
Offensive Security Engineer
Epsilon Solutions Ltd.
Toronto, ON
- Contract
Strong architectural knowledge of modern CI.CD, container platforms (Docker, Kubernetes), cloud-native deployment patterns, and integration of security automation into developer workflows.
Added 2 months ago
C
Ingénieur(e) solutions
ChapsVision
Montreal, QC
- Full-time
Travaillez sur une plateforme de recherche native IA ayant un impact sur les entreprises
Added 2 months ago
BA
Director, Enterprise Architecture
Brookfield Asset Management
Toronto, ON · Brookfield Place
- Full-time
Provide architectural guidance for modern cloud-native data and AI ecosystems, including compute, storage, networking, security, and integration requirements.
Added 2 months ago
BA
Sr Analyst, DevOps
Brookfield Asset Management
Toronto, ON · Brookfield Place
- Full-time
The Senior AI Cloud Developer Analyst within Brookfield’s Technical Service Group (TSG) builds and delivers AI solutions from prototype to production, implementing scalable, secure and…
Added 2 months ago
C
Engineer, Sensor - Mac, Linux, or Windows (Hybrid)
CrowdStrike
Toronto, ON
- Full-time
…redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is…
Added 2 months ago
Senior Engineer (Platform)
Later
Vancouver, BC
Built on a native, AI-powered platform and more than a decade of proprietary data - including billions of social interactions, impressions, and $2.4B+ in verified influencer-driven…
Added 2 months ago
T
Senior Software Engineer
Tactable
Toronto, ON
- Full-time
Modernize and migrate legacy systems to cloud-native infrastructure

Epsilon Solutions Ltd.

Offensive Security Engineer

Toronto, ON, Canada

Contract

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Contract
Posting language: English
Posted: Sep 15, 2026

Original job description

Role: Offensive Security Engineer

Toronto, Hybrid

Job Description

As “Principal Consultant, Agentic AI Cybersecurity Engineer” you will work hands-on alongside our cybersecurity engineering and application security teams to build, operate, and advance the agentic AI systems that find, exploit, and remediate vulnerabilities end-to-end across our application and infrastructure estate. Operating at a principal engineer level, you will personally direct frontier AI models do discover vulnerabilities in production code, develop proof-of-concept exploits, generate and validate fixes, and integrate them into CI/CD pipelines with safe human-in-the-loop controls. You will also build reusable AI skills, prompts, and tooling that make agentic vulnerability management efficient and scalable across the estate. You will bring deep dual expertise across offensive and defensive security, penetration testing, and software engineering, and apply that fluency to push the boundaries of what is possible with agentic AI in a regulated enterprise environment.

What will you do?

Architect and operationalize the end-to-end agentic AI patching pipeline spanning detection, fix generation, automated testing, and release across SAST, DAST, SCA, IAST, container, and server vulnerabilities.
Use frontier AI models to discover novel vulnerabilities in production application and infrastructure code, develop proof-of-concept exploits, and validate that AI-generated fixes close the underlying root cause.
Build and maintain the library of reusable AI skills, prompts, evaluation harness, and tooling that power agentic vulnerability discovery, triage, remediation, false positive analysis, and exemption workflows at scale.
Design and operationalize AI-driven false positive analysis and exemption processes to reduce manual triage burden and surface only actionable findings to development teams.
Conduct hands-on penetration testing and red team exercise against critical applications and infrastructure to validate defensive controls and agent-generated remediations.
Extend agentic remediation coverage across SAST, SCA, DAST, IAST, container, and server vulnerabilities, including the data and tooling needed to connect findings back to source.
Design agent prompting, guardrails, evaluation frameworks, and appropriate human-in-the-loop controls to ensure safe autonomous code changes, testing, and deployment.
Drive integration of agentic remediation into enterprise CI/CD pipelines (Github, Jenkins, etc.) across the deployment landscape.
Communicate technical design, risk trade-offs, and delivery progress clearly to senior stakeholders including CIO, CISO, 2LOD, and Audit functions.

Must-have:

10+ years hands-on experience across software engineering, offensive security, and defensive security at a principal engineer level, with demonstrated personal contributions to production codebases and published vulnerability research or penetration testing engagements.
Advanced technical proficiency in multiple programming language (Java, C#, C, C++, Python, JavaScript/TypeScript, .NET, Go) with proven ability to personally write, review, and remediate production code.
Deep fluency in vulnerability classes including memory safety, injection authentication and authorization flaws, cryptographic misuse, deserialization, race conditions, and supply chain attacks, with hands-on experience finding and exploiting each.
Extensive hands-on experience with penetration testing, red teaming, exploit development, reverse engineering, and secure code review against OWASP Top 10 and SANS 25, combined with defensive engineering experience building detection and remediation capabilities.
Extensive hands-on experience with application security testing tools (SAST, DAST, IAST, SCA), including tuning, false positive analysis, exemption workflow design, and enterprise vulnerability management at scale.
Deep technical fluency with agentic AI coding tools and frameworks (Claude, Devin, Copilot, Windsurf, Cursor, MCP, including prompt engineering, agent orchestration, reusable skill and tool design, guardrail design, and evaluation.
Strong architectural knowledge of modern CI.CD, container platforms (Docker, Kubernetes), cloud-native deployment patterns, and integration of security automation into developer workflows.

Nice-to-have:

Relevant security certifications (OSCP, OSCE, OSEP, GXPN, GWAPT, CISSP, or equivalent).
Experience in financial services or highly regulated industries with exposure to SOX, SOC1, and regulatory audit.
Public evidence of offensive capability: published CVEs, bug bounty track record, conference talks (DEFCON, Black Hat, Offensive Con, Recon), CTF placements, or open-source security tooling contributions.
Hands-on experience with enterprise vulnerability tooling (Tenable, Aqua, Snyk, BrightSec) and remediation at scale.
Demonstrated ability to advise senior technology leaders and deliver within complex, multi-stakeholder enterprise environments.

Apply on LinkedIn About employer

More about this job

Responsibilities

Architect and operate agentic AI systems to automate the end-to-end discovery, exploitation, and remediation of vulnerabilities across application and infrastructure estates. Conduct hands-on penetration testing and red team exercises to validate defensive controls and AI-generated fixes.

Requirements

Requires over 10 years of experience in software engineering and offensive/defensive security at a principal level. Must possess deep proficiency in multiple programming languages and extensive experience with AI coding tools and application security testing frameworks.

Skills

Offensive Security
Agentic AI
Penetration Testing
Software Engineering
Vulnerability Management
Red Teaming
Exploit Development
Secure Code Review
SAST
DAST
SCA
IAST
Prompt Engineering
CI/CD Integration
Reverse Engineering
Cloud-Native Security

Visa sponsorship

Not detected in the job text

Keywords

Agentic AI
Offensive Security
Penetration Testing
Red Teaming
Java
C#
C++
Python
JavaScript
TypeScript
.NET
Go
OWASP Top 10
SANS 25
SAST
DAST
IAST
SCA
Claude
Devin
Copilot
Windsurf
Cursor
MCP
Docker
Kubernetes
Github
Jenkins
OSCP
OSCE

Report this job

Work requirements

Jobs in Canada