Jobs in Canada

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 1 day ago
IN
Cloud Architect
IKO North America
Mississauga, ON
- Full-time
The successful candidate must be based in Mississauga, Ontario, and work on-site
Added 8 days ago
E
Specialist I, IT Enterprise GIS Technical Specialist
Enbridge
Calgary, AB · Edmonton, AB · Toronto, ON · North York
- Full-time
Lead ArcGIS Enterprise lifecycle activities, including new environment builds, upgrades, migrations, patching, security remediation, capacity planning, performance tuning, and technical…
Added 8 days ago
BH
SAP Technical Lead – Platform & BTP
BC Hydro
Burnaby, BC
- $131,100 to $165,800 CAD / year
- Full-time
Lead SAP technical security in partnership with Cybersecurity. This covers authorization and role design standards, SAP Cloud Identity Services (IAS/IPS), single sign-on, certificate…
Added 9 days ago
AI
Cloud Solution Architect
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.
Added 11 days ago
I
Cloud Engineer
Irth
Canada
- Full-time
Manage vulnerability remediation, patching, and findings from security scans and penetration tests
Added 18 days ago
KR
Vulnerability Remediation and Patching Architect
KTek Resourcing
Toronto, ON
- Contract
Must have: Nessus, Security Event Analysis,Technical solution implementation-SIEM,Vulnerability & Compliance Remediation
Added 21 days ago
AI
AWS Architect
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.
Added 21 days ago
KR
Vulnerability Remediation and Patching Architect
KTek Resourcing
Toronto, ON
- Temporary
Provide architecture leadership for enterprise vulnerability remediation, security hardening and patching across AIX, Linux and Windows. Translate vulnerability intelligence into safe,…
Added 23 days ago
AI
AWS Architect - Security, Governance & Identity Management, Disaster Recovery (DR) & Business Continuity
Apptoza Inc.
Toronto, ON
- Full-time
Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.
Added 24 days ago
T
Workplace Technology - Technical Architect
TransLink
Vancouver, BC · Greater Vancouver, BC
- $109,920 to $164,880 CAD / year
- Full-time
Identifies opportunities to automate manual provisioning, onboarding, patching, compliance, packaging, device lifecycle, software request, and self-service processes; ensures automation is…
Added 24 days ago
W
VMware Cloud Foundation (VCF) L3 Operations Engineer
W3Global
Canada
- Contract
Participate in security audits and vulnerability management, implementing remediation strategies for identified risks.
Added 25 days ago
G
Spécialiste en sécurité des réseaux / Network Security Specialist
Genetec
Montreal, QC
- Full-time
Added 28 days ago
SP
Manager, Infrastructure & Security
Spark Power
Remote, Canada
- $120,000 to $140,000 CAD / year
- Full-time
- Remote
Drive and report on vulnerability remediation, patch compliance, system hardening, access reviews, penetration testing, and phishing simulations.
Added 28 days ago
SP
Manager, Infrastructure & Security
Spark Power ⚡
ON · Ontario, Canada
- Full-time
Drive and report on vulnerability remediation, patch compliance, system hardening, access reviews, penetration testing, and phishing simulations.
Added 28 days ago
ZS
AWS Architect
Zodiac Solutions, Inc
Toronto, ON
- Full-time
Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.
Added 28 days ago
IS
Cloud Engineer
Irth Solutions
Remote, Canada
- Full-time
- Remote
Manage vulnerability remediation, patching, and findings from security scans and penetration tests.
Added 1 month ago
UO
ERP Oracle DBA Specialist - Information Technologies
University of Calgary
Calgary, AB
- Full-time
Knowledge of patching, recovery, monitoring, environment management, vulnerability remediation, change management, and ITSM practices.
Added 1 month ago
UO
ERP System Administrator - Information Technologies
University of Calgary
Calgary, AB
- Full-time
Provides technical evidence and status information for patching, vulnerability remediation, recovery, and operational reporting.
Added 1 month ago
T
Cloud Architect
Tekshapers
Toronto, ON
- Full-time
Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.
Added 1 month ago
N
Enterprise Cloud & Platform Engineer
Numeris
Toronto, ON
- Full-time
Partner with cybersecurity teams on vulnerability remediation and security monitoring.
Added 1 month ago
HI
Lead, Infrastructure & IT Operations
Healthcare Insurance Reciprocal of Canada (HIROC)
Toronto, ON
- Full-time
Collaborate with cross functional teams (Applications, Analytics, Performance Excellence, and Information Security) to deliver infrastructure services and ensure the availability,…
Added 1 month ago
C
Linux Desktop Engineer
Celestica
Toronto, ON
- Full-time
Patching & Vulnerability Remediation: Support and execute monthly operating system and application patching cycles. Ensure critical security patches are vetted and pushed to engineering…
Added 1 month ago
RI
DevOps Manager
Rightsline Inc
Toronto, ON
- $85,000 to $95,000 CAD / year
…the team that owns our cloud platform, delivery pipelines, and production reliability across North America and Europe. You will manage and develop a team of five - a Senior DevOps Engineer,…
Added 1 month ago
CI
Linux Desktop Engineer
Celestica International LP
Toronto, ON
- $89,355 to $124,779 CAD / year
Patching & Vulnerability Remediation: Support and execute monthly operating system and application patching cycles. Ensure critical security patches are vetted and pushed to engineering…
Added 1 month ago
ES
Offensive Security Engineer
Epsilon Solutions Ltd.
Toronto, ON
- Contract
Architect and operationalize the end-to-end agentic AI patching pipeline spanning detection, fix generation, automated testing, and release across SAST, DAST, SCA, IAST, container, and…

Epsilon Solutions Ltd.

Offensive Security Engineer

Toronto, ON, Canada

Contract

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Contract
Posting language: English
Posted: Sep 15, 2026

Original job description

Role: Offensive Security Engineer

Toronto, Hybrid

Job Description

As “Principal Consultant, Agentic AI Cybersecurity Engineer” you will work hands-on alongside our cybersecurity engineering and application security teams to build, operate, and advance the agentic AI systems that find, exploit, and remediate vulnerabilities end-to-end across our application and infrastructure estate. Operating at a principal engineer level, you will personally direct frontier AI models do discover vulnerabilities in production code, develop proof-of-concept exploits, generate and validate fixes, and integrate them into CI/CD pipelines with safe human-in-the-loop controls. You will also build reusable AI skills, prompts, and tooling that make agentic vulnerability management efficient and scalable across the estate. You will bring deep dual expertise across offensive and defensive security, penetration testing, and software engineering, and apply that fluency to push the boundaries of what is possible with agentic AI in a regulated enterprise environment.

What will you do?

Architect and operationalize the end-to-end agentic AI patching pipeline spanning detection, fix generation, automated testing, and release across SAST, DAST, SCA, IAST, container, and server vulnerabilities.
Use frontier AI models to discover novel vulnerabilities in production application and infrastructure code, develop proof-of-concept exploits, and validate that AI-generated fixes close the underlying root cause.
Build and maintain the library of reusable AI skills, prompts, evaluation harness, and tooling that power agentic vulnerability discovery, triage, remediation, false positive analysis, and exemption workflows at scale.
Design and operationalize AI-driven false positive analysis and exemption processes to reduce manual triage burden and surface only actionable findings to development teams.
Conduct hands-on penetration testing and red team exercise against critical applications and infrastructure to validate defensive controls and agent-generated remediations.
Extend agentic remediation coverage across SAST, SCA, DAST, IAST, container, and server vulnerabilities, including the data and tooling needed to connect findings back to source.
Design agent prompting, guardrails, evaluation frameworks, and appropriate human-in-the-loop controls to ensure safe autonomous code changes, testing, and deployment.
Drive integration of agentic remediation into enterprise CI/CD pipelines (Github, Jenkins, etc.) across the deployment landscape.
Communicate technical design, risk trade-offs, and delivery progress clearly to senior stakeholders including CIO, CISO, 2LOD, and Audit functions.

Must-have:

10+ years hands-on experience across software engineering, offensive security, and defensive security at a principal engineer level, with demonstrated personal contributions to production codebases and published vulnerability research or penetration testing engagements.
Advanced technical proficiency in multiple programming language (Java, C#, C, C++, Python, JavaScript/TypeScript, .NET, Go) with proven ability to personally write, review, and remediate production code.
Deep fluency in vulnerability classes including memory safety, injection authentication and authorization flaws, cryptographic misuse, deserialization, race conditions, and supply chain attacks, with hands-on experience finding and exploiting each.
Extensive hands-on experience with penetration testing, red teaming, exploit development, reverse engineering, and secure code review against OWASP Top 10 and SANS 25, combined with defensive engineering experience building detection and remediation capabilities.
Extensive hands-on experience with application security testing tools (SAST, DAST, IAST, SCA), including tuning, false positive analysis, exemption workflow design, and enterprise vulnerability management at scale.
Deep technical fluency with agentic AI coding tools and frameworks (Claude, Devin, Copilot, Windsurf, Cursor, MCP, including prompt engineering, agent orchestration, reusable skill and tool design, guardrail design, and evaluation.
Strong architectural knowledge of modern CI.CD, container platforms (Docker, Kubernetes), cloud-native deployment patterns, and integration of security automation into developer workflows.

Nice-to-have:

Relevant security certifications (OSCP, OSCE, OSEP, GXPN, GWAPT, CISSP, or equivalent).
Experience in financial services or highly regulated industries with exposure to SOX, SOC1, and regulatory audit.
Public evidence of offensive capability: published CVEs, bug bounty track record, conference talks (DEFCON, Black Hat, Offensive Con, Recon), CTF placements, or open-source security tooling contributions.
Hands-on experience with enterprise vulnerability tooling (Tenable, Aqua, Snyk, BrightSec) and remediation at scale.
Demonstrated ability to advise senior technology leaders and deliver within complex, multi-stakeholder enterprise environments.

Apply on LinkedIn About employer

More about this job

Responsibilities

Architect and operate agentic AI systems to automate the end-to-end discovery, exploitation, and remediation of vulnerabilities across application and infrastructure estates. Conduct hands-on penetration testing and red team exercises to validate defensive controls and AI-generated fixes.

Requirements

Requires over 10 years of experience in software engineering and offensive/defensive security at a principal level. Must possess deep proficiency in multiple programming languages and extensive experience with AI coding tools and application security testing frameworks.

Skills

Offensive Security
Agentic AI
Penetration Testing
Software Engineering
Vulnerability Management
Red Teaming
Exploit Development
Secure Code Review
SAST
DAST
SCA
IAST
Prompt Engineering
CI/CD Integration
Reverse Engineering
Cloud-Native Security

Visa sponsorship

Not detected in the job text

Keywords

Agentic AI
Offensive Security
Penetration Testing
Red Teaming
Java
C#
C++
Python
JavaScript
TypeScript
.NET
Go
OWASP Top 10
SANS 25
SAST
DAST
IAST
SCA
Claude
Devin
Copilot
Windsurf
Cursor
MCP
Docker
Kubernetes
Github
Jenkins
OSCP
OSCE

Report this job

Work requirements

Jobs in Canada