Jobs in Canada

Email me new jobs Save this search

Added 18 days ago
Software Development Engineer Intern - Summer 2027 (CAN)
Amazon
Vancouver, BC
At Amazon, our tech isn't just a tool, it's your playground. Our engineers work on scalable systems, cloud services, and customer-facing products that operate at global scale. This is an…
Added 17 days ago
Sr. Principal AI Architect
Open Text Corporation
Richmond Hill, ON
Proven, recent hands-on experience architecting and delivering AI applications, with comfort developing in both Java and Python ecosystems. Ability to explain what you personally built and…
Added 17 days ago
O
Sr. Principal AI Architect
OpenText
Richmond Hill, ON
- Full-time
Proven, recent hands-on experience architecting and delivering AI applications, with comfort developing in both Java and Python ecosystems. Ability to explain what you personally built and…
Added 17 days ago
O
Sr. Principal AI Architect
OpenText
Waterloo, ON
- Full-time
Proven, recent hands-on experience architecting and delivering AI applications, with comfort developing in both Java and Python ecosystems. Ability to explain what you personally built and…
Added 17 days ago
O
Senior Principal AI Architect
OpenText
Waterloo, ON
- Full-time
Proven, recent hands-on experience architecting and delivering AI applications, with comfort developing in both Java and Python ecosystems. Ability to explain what you personally built and…
Added 18 days ago
ES
Senior Software Developer
Euna Solutions
ON · Oakville, Ontario
- Full-time
Experience with SAP BusinessObjects Server v4.x, including SSO components written in Java
Added 17 days ago
A
Applied Scientist II, Alexa Daily Essentials Science and Analytics
Amazon
Vancouver, BC
- Full-time
…still needed. Mid-morning, you prototype a new cross-feature experience, testing whether extraction models can reliably surface actionable items from customer content. After lunch, you run…
Added 18 days ago
ES
Software Engineering Team Lead
Exchange Solutions
Toronto, ON · Greater Toronto Area, Canada
- Full-time
Use AI as a default tool and teach it. Apply code assistants, agents, test generation, code search, and impact analysis to real work, review generated code with the same rigour as…
Added 18 days ago
Senior Software Engineer, Agent Gateway
Okta
Toronto, ON
…on-premises customer deployments, extending policy semantics beyond tool-level allowlists, adding native support for Agent-to-Agent brokered delegation, and scaling to tenants with…
Added 18 days ago
O
Senior Software Engineer, Agent Gateway
Okta
Toronto, ON
- $136,000 to $187,000 CAD / year
- Full-time
…on-premises customer deployments, extending policy semantics beyond tool-level allowlists, adding native support for Agent-to-Agent brokered delegation, and scaling to tenants with…
Added 18 days ago
Principal AI Architect
Open Text Corporation
Richmond Hill, ON
Current knowledge of commercial and open model capabilities, limitations, and economics, with experience evaluating choices against real application needs and measuring quality, latency,…
Added 18 days ago
SDET Contractor
PlayStation Global
Waterloo, ON
The ideal candidate brings strong Quality Engineering and test automation fundamentals, with experience testing Generative AI, LLM-based, or Agentic AI systems. They should be comfortable…
Added 19 days ago
Sr. Quality Assurance Developer
Open Text Corporation
Richmond Hill, ON
The role of Senior Quality Assurance Developer is to effectively analyze requirements, create, execute comprehensive test cases in a timely and accurate manner, for simple to complex…
Added 19 days ago
Sr. Quality Assurance Developer
Open Text Corporation
Richmond Hill, ON
The role of Senior Quality Assurance Developer is to effectively analyze requirements, create, execute comprehensive test cases in a timely and accurate manner, for simple to complex…
Added 19 days ago
Staff Fullstack Engineer, SecureAI
Okta
Toronto, ON
Operates well beyond basic AI tool usage - understands how to apply AI meaningfully across the full software development lifecycle, can evaluate and adopt new AI tooling with good judgment,…
Added 19 days ago
Manager, Engineering, SecureAI
Okta
Toronto, ON
This team works on policies that replace broad, connection-level agent access with per-agent, per-resource, per-tool policy decisions and enforcement evaluated at runtime on every request,…
Added 19 days ago
C
Senior Penetration Tester & Red Team Engineer
Cognizant
Toronto, ON
- Full-time
…penetration testing, red team operations, and custom security tool development. This role combines hands-on security engineering with offensive security expertise to identify…
Added 20 days ago
C
AI Engineer Intern (Winter 2027)
Ciena
Ottawa, ON
- Full-time
Hands-on experience building applications with LLM APIs, tool calling, structured outputs, or multi-step agent workflows.
Added 20 days ago
AI Security Engineer
Celestica International LP
Toronto, ON
Demonstrated development experience including Coding or Scripting experience (ie. Python, Powershell, Java, .NET)
Added 20 days ago
ES
Offensive Security Engineer
Epsilon Solutions Ltd.
Toronto, ON
- Contract
10+ years hands-on experience across software engineering, offensive security, and defensive security at a principal engineer level, with demonstrated personal contributions to production…
Added 20 days ago
T
Senior Software Engineer
Tactable
Toronto, ON
- Full-time
Prior experience with Java or JVM-based systems in mixed-language environments
Added 20 days ago
P
Agent & DevOps Platform Engineer
PeoplePilot
Toronto, ON
- Full-time
…ON (Onsite). The ideal candidate will have strong hands-on experience in AWS, Python, CI/CD, Kubernetes, Docker, Infrastructure as Code, and DevSecOps, along with practical experience…
Added 22 days ago
AI
Cloud Platform Engineer – AWS, Python, DevOps & AI/LLM
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Working experience with at least one additional language or ecosystem such as Java, .NET, Groovy, or Node.js.
Added 21 days ago
C
Crypto Engineer (Contract)
Capco
Toronto, ON
- Full-time
Working knowledge of Java and Spring, with experience using application servers such as JBoss and WebSphere.
Added 21 days ago
Crypto Engineer (Contract)
Capco
Toronto, ON
Working knowledge of Java and Spring, with experience using application servers such as JBoss and WebSphere.

Epsilon Solutions Ltd.

Offensive Security Engineer

Toronto, ON, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: Oct 15, 2026
Posting language: English
Posted: Sep 15, 2026

Original job description

Role: Offensive Security Engineer

Toronto, Hybrid

Job Description

As “Principal Consultant, Agentic AI Cybersecurity Engineer” you will work hands-on alongside our cybersecurity engineering and application security teams to build, operate, and advance the agentic AI systems that find, exploit, and remediate vulnerabilities end-to-end across our application and infrastructure estate. Operating at a principal engineer level, you will personally direct frontier AI models do discover vulnerabilities in production code, develop proof-of-concept exploits, generate and validate fixes, and integrate them into CI/CD pipelines with safe human-in-the-loop controls. You will also build reusable AI skills, prompts, and tooling that make agentic vulnerability management efficient and scalable across the estate. You will bring deep dual expertise across offensive and defensive security, penetration testing, and software engineering, and apply that fluency to push the boundaries of what is possible with agentic AI in a regulated enterprise environment.

What will you do?

Architect and operationalize the end-to-end agentic AI patching pipeline spanning detection, fix generation, automated testing, and release across SAST, DAST, SCA, IAST, container, and server vulnerabilities.
Use frontier AI models to discover novel vulnerabilities in production application and infrastructure code, develop proof-of-concept exploits, and validate that AI-generated fixes close the underlying root cause.
Build and maintain the library of reusable AI skills, prompts, evaluation harness, and tooling that power agentic vulnerability discovery, triage, remediation, false positive analysis, and exemption workflows at scale.
Design and operationalize AI-driven false positive analysis and exemption processes to reduce manual triage burden and surface only actionable findings to development teams.
Conduct hands-on penetration testing and red team exercise against critical applications and infrastructure to validate defensive controls and agent-generated remediations.
Extend agentic remediation coverage across SAST, SCA, DAST, IAST, container, and server vulnerabilities, including the data and tooling needed to connect findings back to source.
Design agent prompting, guardrails, evaluation frameworks, and appropriate human-in-the-loop controls to ensure safe autonomous code changes, testing, and deployment.
Drive integration of agentic remediation into enterprise CI/CD pipelines (Github, Jenkins, etc.) across the deployment landscape.
Communicate technical design, risk trade-offs, and delivery progress clearly to senior stakeholders including CIO, CISO, 2LOD, and Audit functions.

Must-have:

10+ years hands-on experience across software engineering, offensive security, and defensive security at a principal engineer level, with demonstrated personal contributions to production codebases and published vulnerability research or penetration testing engagements.
Advanced technical proficiency in multiple programming language (Java, C#, C, C++, Python, JavaScript/TypeScript, .NET, Go) with proven ability to personally write, review, and remediate production code.
Deep fluency in vulnerability classes including memory safety, injection authentication and authorization flaws, cryptographic misuse, deserialization, race conditions, and supply chain attacks, with hands-on experience finding and exploiting each.
Extensive hands-on experience with penetration testing, red teaming, exploit development, reverse engineering, and secure code review against OWASP Top 10 and SANS 25, combined with defensive engineering experience building detection and remediation capabilities.
Extensive hands-on experience with application security testing tools (SAST, DAST, IAST, SCA), including tuning, false positive analysis, exemption workflow design, and enterprise vulnerability management at scale.
Deep technical fluency with agentic AI coding tools and frameworks (Claude, Devin, Copilot, Windsurf, Cursor, MCP, including prompt engineering, agent orchestration, reusable skill and tool design, guardrail design, and evaluation.
Strong architectural knowledge of modern CI.CD, container platforms (Docker, Kubernetes), cloud-native deployment patterns, and integration of security automation into developer workflows.

Nice-to-have:

Relevant security certifications (OSCP, OSCE, OSEP, GXPN, GWAPT, CISSP, or equivalent).
Experience in financial services or highly regulated industries with exposure to SOX, SOC1, and regulatory audit.
Public evidence of offensive capability: published CVEs, bug bounty track record, conference talks (DEFCON, Black Hat, Offensive Con, Recon), CTF placements, or open-source security tooling contributions.
Hands-on experience with enterprise vulnerability tooling (Tenable, Aqua, Snyk, BrightSec) and remediation at scale.
Demonstrated ability to advise senior technology leaders and deliver within complex, multi-stakeholder enterprise environments.

Apply About employer

More about this job

Responsibilities

Architect and operate agentic AI systems to automate the end-to-end discovery, exploitation, and remediation of vulnerabilities across application and infrastructure estates. Conduct hands-on penetration testing and red team exercises to validate defensive controls and AI-generated fixes.

Requirements

Requires over 10 years of experience in software engineering and offensive/defensive security at a principal level. Must possess deep proficiency in multiple programming languages and extensive experience with AI coding tools and application security testing frameworks.

Skills

Offensive Security
Agentic AI
Penetration Testing
Software Engineering
Vulnerability Management
Red Teaming
Exploit Development
Secure Code Review
SAST
DAST
SCA
IAST
Prompt Engineering
CI/CD Integration
Reverse Engineering
Cloud-Native Security

Visa sponsorship

Not detected in the job text

Keywords

Agentic AI
Offensive Security
Penetration Testing
Red Teaming
Java
C#
C++
Python
JavaScript
TypeScript
.NET
Go
OWASP Top 10
SANS 25
SAST
DAST
IAST
SCA
Claude
Devin
Copilot
Windsurf
Cursor
MCP
Docker
Kubernetes
Github
Jenkins
OSCP
OSCE

Report this job