Find work in Canada.

322,860 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 2 days ago
Senior Cloud Security Engineer ( Global Security)
RBC
Vancouver, BC · Toronto, ON
Full-time
The AWS Security Controls team within Cloud Security Engineering is working on several exciting initiatives to further secure RBC’s AWS environment. In this role as a Senior Cloud Security…
Added 2 days ago
Security Engineer - 174347 - 174680
Piper Companies
ON · Durham, ON
Full-time
Piper Companies is seeking a Security Engineer to support a leading organization in the technology and government services industry. The Security Engineer will be responsible for ensuring…
Added 2 days ago
Senior Product Security Engineer
Jobgether
Canada
Full-time
Experience with Python, Java, and/or JavaScript for security automation and tooling is an advantage.
Added 2 days ago
Cybersecurity Specialist
J&M Group
Toronto, ON
Full-time
Technical Security Research Engineer to research, prototype, evaluate, and operationalize emerging cybersecurity capabilities. This is a hands-on role for someone who can move from a…
Added 2 days ago
CyberSecurity Specialist
Themesoft Inc.
Toronto, ON · North York, ON
Contract
Experience with LLMs, AI agents, tool calling, orchestration frameworks, APIs, and security automation
Added 2 days ago
Cyber Security Specialist
Themesoft Inc.
Toronto, ON · North York, ON
Contract
Technical Security Research Engineer to research, prototype, evaluate, and operationalize emerging cybersecurity capabilities. This is a hands-on role for someone who can move from a…
Added 2 days ago
CyberSecurity Specialist
Themesoft Inc.
Toronto, ON · North York, ON
Contract
Technical Security Research Engineer to research, prototype, evaluate, and operationalize emerging cybersecurity capabilities. This is a hands-on role for someone who can move from a…
Added 4 days ago
Security Researcher Engineer
J&M Group
Toronto, ON
Full-time
Strong programming skills in Python, Java, Node.js, Go, C/C++, with experience in LLMs, AI agents, tool calling, orchestration frameworks, APIs, cloud, containers, and security automation.
Added 4 days ago
Senior DevSecOps & AI Engineer
J&M Group
Toronto, ON
Contract
Strong Python scripting and security automation experience
Added 5 days ago
Security Research Engineer - AI Security, Agentic AI & Emerging Cybersecurity
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Technical Security Research Engineer to research, prototype, evaluate, and operationalize emerging cybersecurity capabilities.
Added 5 days ago
Privileged Access Engineer
Tekgence Inc
Montreal, QC
Contract
Seeking a Privileged Access Engineer (PAM) to design, implement, and support enterprise PAM solutions while leveraging AI/ML capabilities for threat detection, automation, risk analysis,…
Added 6 days ago
Senior Certificate Automation Engineer
Raise
Toronto, ON
Full-time
We at Raise are hiring a Senior Certificate Automation Engineer for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet…
Added 6 days ago
Senior Security Engineer - Identity and Access Management
Marqeta
Remote, Canada
Full-time · Remote
We’re seeking an experienced Senior Security Engineer with a strong passion for Identity and Access Management (IAM) and proven expertise in cloud-native environments, particularly AWS. In…
Added 6 days ago
Development Security Specialist (Industrial Oil & Gas Applications)
Pengcorp Ltd.
Calgary, AB
Full-time
We are seeking a Senior Application Security & DevSecOps Engineer to establish, operationalize, and continuously improve our Secure Software Development Lifecycle (SSDLC) across enterprise,…
Added 8 days ago
Security Researcher Engineer
Tata Consultancy Services
Toronto, ON
$100,000 to $120,000 CAD / year
Full-time
Technical Security Research Engineer to research, prototype, evaluate, and operationalize emerging cybersecurity capabilities. This is a hands-on role for someone who can move from a…
Added 12 days ago
Senior Corporate Security Analyst
Clio
Calgary, AB · Burnaby, BC · Vancouver, BC · Toronto, ON
Full-time
CorpSec is transitioning and growing at Clio, into a focused mission-driven function within the organization. Security systems and practices are already in place, this role will be…
Added 9 days ago
Cyber Secruity Engineer
Lorex Technology
Markham, ON
$105,000 to $125,000 CAD / year
Full-time
AWS Certified Security – Specialty, GCP Professional Cloud Security Engineer, CISSP, CISA, or CCSK
Added 11 days ago
Sr. Analytics and Automation Engineer
Sun Life
Toronto, ON · Waterloo, ON · Sun Life Toronto One York
Full-time
Sr. Analytics and Automation Engineer - Focus on Micro segmentation Policy-as-a-Code.
Added 12 days ago
Offensive Security Engineer
Epsilon Solutions Ltd.
Toronto, ON
Contract
As “Principal Consultant, Agentic AI Cybersecurity Engineer” you will work hands-on alongside our cybersecurity engineering and application security teams to build, operate, and advance the…
Added 13 days ago
173788
Piper Companies
ON · Durham, ON
Full-time
Piper Companies is seeking a Security Engineer to support a leading organization in the technology and government services industry. The Security Engineer will be responsible for ensuring…
Added 13 days ago
Systems Engineer II
Leonardo DRS
Ottawa, ON · Kanata, ON
Full-time
…frameworks (e.g., NIST, ISO 27001, CIS Controls); familiarity with security technologies (e.g., VPN, SSL/TLS, AES, IDS/IPS); relevant certifications (e.g., CISSP, CISM,…
Added 13 days ago
Systems Engineer
Leonardo DRS
Ottawa, ON · Kanata, ON
Full-time
…frameworks (e.g., NIST, ISO 27001, CIS Controls); familiarity with security technologies (e.g., VPN, SSL/TLS, AES, IDS/IPS); relevant certifications (e.g., CISSP, CISM,…
Added 14 days ago
Systems Engineer II
Leonardo DRS, Inc.
Ottawa, ON · Kanata, ON
…frameworks (e.g., NIST, ISO 27001, CIS Controls); familiarity with security technologies (e.g., VPN, SSL/TLS, AES, IDS/IPS); relevant certifications (e.g., CISSP, CISM,…
Added 22 days ago
Modern Endpoint Management Engineer
Scotiabank
Toronto, ON
We are seeking an experienced Senior Engineer Third-Party Application Patch Management to Lead an enterprise-scale third-party application patch management across complex endpoint…
Added 28 days ago
Security Engineer
Advantage Group
Toronto, ON
$130,000 to $140,000 CAD / year
Full-time
Advantage Group International is seeking a Security Engineer to join our Technology team. This is a unique opportunity to build and shape our security posture from the ground up. The…

Epsilon Solutions Ltd.

Offensive Security Engineer

Toronto, ON, Canada

Job type: Contract
Apply by: Oct 15, 2026
Posting language: English
Posted: Sep 15, 2026

Apply About employer

Applications open in a new tab.

Original job description

Role: Offensive Security Engineer

Toronto, Hybrid

Job Description

As “Principal Consultant, Agentic AI Cybersecurity Engineer” you will work hands-on alongside our cybersecurity engineering and application security teams to build, operate, and advance the agentic AI systems that find, exploit, and remediate vulnerabilities end-to-end across our application and infrastructure estate. Operating at a principal engineer level, you will personally direct frontier AI models do discover vulnerabilities in production code, develop proof-of-concept exploits, generate and validate fixes, and integrate them into CI/CD pipelines with safe human-in-the-loop controls. You will also build reusable AI skills, prompts, and tooling that make agentic vulnerability management efficient and scalable across the estate. You will bring deep dual expertise across offensive and defensive security, penetration testing, and software engineering, and apply that fluency to push the boundaries of what is possible with agentic AI in a regulated enterprise environment.

What will you do?

Architect and operationalize the end-to-end agentic AI patching pipeline spanning detection, fix generation, automated testing, and release across SAST, DAST, SCA, IAST, container, and server vulnerabilities.
Use frontier AI models to discover novel vulnerabilities in production application and infrastructure code, develop proof-of-concept exploits, and validate that AI-generated fixes close the underlying root cause.
Build and maintain the library of reusable AI skills, prompts, evaluation harness, and tooling that power agentic vulnerability discovery, triage, remediation, false positive analysis, and exemption workflows at scale.
Design and operationalize AI-driven false positive analysis and exemption processes to reduce manual triage burden and surface only actionable findings to development teams.
Conduct hands-on penetration testing and red team exercise against critical applications and infrastructure to validate defensive controls and agent-generated remediations.
Extend agentic remediation coverage across SAST, SCA, DAST, IAST, container, and server vulnerabilities, including the data and tooling needed to connect findings back to source.
Design agent prompting, guardrails, evaluation frameworks, and appropriate human-in-the-loop controls to ensure safe autonomous code changes, testing, and deployment.
Drive integration of agentic remediation into enterprise CI/CD pipelines (Github, Jenkins, etc.) across the deployment landscape.
Communicate technical design, risk trade-offs, and delivery progress clearly to senior stakeholders including CIO, CISO, 2LOD, and Audit functions.

Must-have:

10+ years hands-on experience across software engineering, offensive security, and defensive security at a principal engineer level, with demonstrated personal contributions to production codebases and published vulnerability research or penetration testing engagements.
Advanced technical proficiency in multiple programming language (Java, C#, C, C++, Python, JavaScript/TypeScript, .NET, Go) with proven ability to personally write, review, and remediate production code.
Deep fluency in vulnerability classes including memory safety, injection authentication and authorization flaws, cryptographic misuse, deserialization, race conditions, and supply chain attacks, with hands-on experience finding and exploiting each.
Extensive hands-on experience with penetration testing, red teaming, exploit development, reverse engineering, and secure code review against OWASP Top 10 and SANS 25, combined with defensive engineering experience building detection and remediation capabilities.
Extensive hands-on experience with application security testing tools (SAST, DAST, IAST, SCA), including tuning, false positive analysis, exemption workflow design, and enterprise vulnerability management at scale.
Deep technical fluency with agentic AI coding tools and frameworks (Claude, Devin, Copilot, Windsurf, Cursor, MCP, including prompt engineering, agent orchestration, reusable skill and tool design, guardrail design, and evaluation.
Strong architectural knowledge of modern CI.CD, container platforms (Docker, Kubernetes), cloud-native deployment patterns, and integration of security automation into developer workflows.

Nice-to-have:

Relevant security certifications (OSCP, OSCE, OSEP, GXPN, GWAPT, CISSP, or equivalent).
Experience in financial services or highly regulated industries with exposure to SOX, SOC1, and regulatory audit.
Public evidence of offensive capability: published CVEs, bug bounty track record, conference talks (DEFCON, Black Hat, Offensive Con, Recon), CTF placements, or open-source security tooling contributions.
Hands-on experience with enterprise vulnerability tooling (Tenable, Aqua, Snyk, BrightSec) and remediation at scale.
Demonstrated ability to advise senior technology leaders and deliver within complex, multi-stakeholder enterprise environments.

Apply About employer

More about this job

Responsibilities

Architect and operate agentic AI systems to automate the end-to-end discovery, exploitation, and remediation of vulnerabilities across application and infrastructure estates. Conduct hands-on penetration testing and red team exercises to validate defensive controls and AI-generated fixes.

Requirements

Requires over 10 years of experience in software engineering and offensive/defensive security at a principal level. Must possess deep proficiency in multiple programming languages and extensive experience with AI coding tools and application security testing frameworks.

Skills

Offensive Security
Agentic AI
Penetration Testing
Software Engineering
Vulnerability Management
Red Teaming
Exploit Development
Secure Code Review
SAST
DAST
SCA
IAST
Prompt Engineering
CI/CD Integration
Reverse Engineering
Cloud-Native Security

Visa sponsorship

Not detected in the job text

Keywords

Agentic AI
Offensive Security
Penetration Testing
Red Teaming
Java
C#
C++
Python
JavaScript
TypeScript
.NET
Go
OWASP Top 10
SANS 25
SAST
DAST
IAST
SCA
Claude
Devin
Copilot
Windsurf
Cursor
MCP
Docker
Kubernetes
Github
Jenkins
OSCP
OSCE

Report this job