Find work in Canada.

487,793 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 3 months ago
S
Directeur.trice principal.e, opérations de l'expérience client // Senior Director, Customer Experience Operations
SSENSE
Montreal, Quebec
- Full-time
…divisions mondiales de l'assistance à la clientèle et de la protection des actifs de l'organisation. En gérant trois piliers essentiels - l'assistance à la clientèle, l'intelligence et…
Added 2 months ago
Cargo Agent - YXL
The Talent Team at Perimeter Aviation
Sioux Lookout, ON
Reporting to the Western Regional Manager, the Cargo Agent is responsible to receive, verify and inspect freight shipments from the general public and corporate customers. Prepare required…
Added 2 months ago
MA
DZ Driver/ Inside Sales
Messer Americas
Red Deer, AB
- Full-time
…Health and safety, sustainability practices and environmental protection are core Messer values that are embedded in our daily…
Added 4 months ago
AS
Security Officer - Full Time (Berry Mills)
Admiral Security and Investigations
Berry Mills, New Brunswick
- $16.5 to $17.5 CAD / hour
- Full-time
En tant qu'agent de sécurité chez Admiral Security, vous jouerez un rôle central dans la protection des biens, des actifs et du personnel de nos clients. Vos responsabilités incluront, sans…
Added 3 months ago
TR
Manager, Software Development Engineering
Thomson Reuters
Toronto, Ontario
- Full-time
…making the tool ecosystem discoverable and self-service for agent…
Added 4 months ago
AS
Security Officer - Casual (Moncton)
Admiral Security and Investigations
Dieppe, New Brunswick
- $16.5 to $17.5 CAD / hour
- Full-time
En tant qu'agent de sécurité chez Admiral Security, vous jouerez un rôle central dans la protection des biens, des actifs et du personnel de nos clients. Vos responsabilités incluront, sans…
Added 2 months ago
Legal Counsel – Securities & Regulatory Compliance
Recrute Action
Montreal, QC
…decision-making capacity, and regulatory requirements for investor…
Added 2 months ago
MS
Senior Security Engineer - Pentester
Menlo Security
Remote, Canada
- Full-time
- Remote
…documents, and email before they reach the user. With Menlo Agent Runtime Security (MARS), that protection now extends to the AI agents working alongside every employee. Menlo Security is…
Added 2 months ago
P
Corporate Tax, Manager (Bilingual FR/EN)
PwC
Montreal, QC
- Full-time
Added 2 months ago
P
Organizational Transformation Manager (Bilingual FR/EN)
PwC
Montreal, QC
- Full-time
Added 2 months ago
Senior Platform Engineer
AutoTrader.ca
Toronto, ON
…fixes for failing builds), agentic workflows on AWS (Bedrock, Agent Core), and MCP-based integrations. The AI is the means, not the end. What we care about is a faster, smoother day-to-day…
Added 3 months ago
AC
ACG Sales Agent Senior Consultant II
Allstate Canada
Sherwood Park, Alberta
- Full-time
…sophistication, telematics, and, more recently, device and identity…
Added 4 months ago
AS
Bilingual Security Officer - Part Time (Moncton)
Admiral Security and Investigations
Dieppe, New Brunswick
- $18 to $19 CAD / week
- Part-time
En tant qu'Agent de Sécurité Bilingue chez Admiral Security, vous jouerez un rôle central dans la protection des biens, des actifs et du personnel de nos clients. Vos responsabilités…
Added 4 months ago
AS
Bilingual Security Officer - Casual (Moncton)
Admiral Security and Investigations
Dieppe, New Brunswick
- Full-time
En tant qu'Agent de Sécurité Bilingue chez Admiral Security, vous jouerez un rôle central dans la protection des biens, des actifs et du personnel de nos clients. Vos responsabilités…
Added 3 months ago
HT
Research Engineer - AI Data Security
Huawei Technologies Canada Co., Ltd.
Markham, ON · Waterloo, ON
- Contract
Research focuses on key areas such as authentication & authorization, kernel & hardware security, data security, ai agent security, advancement of agentic ai for product security. The lab…
Added 3 months ago
HT
Intern Researcher - AI Data Security
Huawei Technologies Canada Co., Ltd.
Waterloo, ON
- Internship
Research focuses on key areas such as authentication & authorization, kernel & hardware security, data security, ai agent security, advancement of agentic ai for product security. The lab…
Added 2 months ago
M
Licensed Sales Agent
MutualONE
Seaforth, ON
- Full-time
Where innovation, exceptional service, and trusted protection come together to create powerful insurance solutions.
Added 2 months ago
M
Licensed Sales Agent
MutualONE
Ilderton, ON
- Full-time
Where innovation, exceptional service, and trusted protection come together to create powerful insurance solutions.
Added 2 months ago
P
SAP SuccessFactors Performance Management & Learning, Manager
PwC
Calgary, AB · Vancouver, BC · Ottawa, ON · Toronto, ON
- Full-time
Added 1 month ago
P
Manager, Financial Instruments Valuations
PwC
Toronto, ON
- Full-time
Added 4 months ago
W
Senior Process Safety & Fire Protection Engineer
Worley
Calgary, Alberta
- Full-time
…technical expertise and leadership in process safety and fire protection engineering in support of Worley and its clients. This role is responsible for the high-quality delivery of process…
Added 2 months ago
SC
Agent de sécurité | Bombardier | Dorval
Securitas Canada
Montreal, QC
- Full-time
En tant qu'agent de sécurité, vous ferez partie d'une équipe professionnelle spécialisée en prévention, surveillance et protection. Vous évoluerez dans un environnement stimulant offrant…
Added 4 months ago
W
Senior Process Safety & Fire Protection Engineer
Worley
Edmonton, Alberta
- Full-time
…technical expertise and leadership in process safety and fire protection engineering in support of Worley and its clients. This role is responsible for the high-quality delivery of process…
Added 2 months ago
P
IT SR&ED, Manager (Bilingual FR/EN)
PwC
Montreal, QC
- Full-time
Added 1 month ago
V
Global Mobility Tax - Senior Seasonal Signer
Vialto
Toronto, ON
- Temporary
Provide guidance on tax equalization and protection policies to employees, ensuring clear understanding and compliance.

Menlo Security

Senior Security Engineer - Pentester

Remote, Canada

Remote

The base salary range for this role is 158,000 CAD - 237,000 CAD. · Full-time

Apply About employer

Applications open in a new tab.

Job details

Pay: The base salary range for this role is 158,000 CAD - 237,000 CAD.
Job type: Full-time
Workplace: Remote
Posting language: English
Posted: Aug 3, 2026

Original job description

Menlo Security is the leader in Browser Security for human and agentic workforces. Our mission is to enable humans and agents to connect, communicate, and collaborate securely, without compromise. The Menlo Browser Security Platform protects organizations from cyberattacks by stopping threats across the web, documents, and email before they reach the user. With Menlo Agent Runtime Security (MARS), that protection now extends to the AI agents working alongside every employee. Menlo Security is trusted by major global businesses, including Fortune 500 companies and government agencies, to protect their most valuable asset, their data, and is backed by top-tier investors.

Summary

We're looking for a forward-thinking Security Engineer to join our security team, focused on offensive and defensive testing, penetration testing of product features, and the cloud architecture behind the product. You'll operate across a complex multi-cloud environment (AWS & GCP) spanning traditional VMs and modern managed and unmanaged container-based architectures, partnering with fellow Penetration Testing and Cloud Security engineers to run targeted assessments during the testing window immediately before each release. The role reaches beyond the application layer into the Control Plane, reviewing cloud configurations, IAM policies, and orchestration layers against security baselines, and extends to the frontline of external defense by triaging bug bounty submissions and outside vulnerability reports. AI and large language models are core to how this team works day to day - you'll use them to accelerate reconnaissance, generate attack vectors, analyze configurations, and draft vulnerability reports, while applying human judgment to validate findings and communicate risk clearly to product teams. Speed matters here: the team's operating cadence is built around identifying, validating, and reporting vulnerabilities quickly enough to keep pace with release velocity.

Outcomes & KPIs

Key Outcome(s) Owned:

Ensure new product features and the underlying multi-cloud (AWS/GCP) infrastructure are rigorously security-tested before release, and that vulnerabilities surfaced internally or via bug bounty are triaged and communicated with speed and precision.

Success Metrics / KPIs:

Percentage of roadmap features assessed within the pre-release testing window.
Mean time to triage and validate bug bounty / external vulnerability reports.
Reduction in critical/high-severity vulnerabilities escaping to production post-release.
Time saved per assessment cycle through AI-assisted tooling and automation.
Quality and actionability of vulnerability reports and PoCs, as rated by product teams.

What You'll Do

Conduct deep-dive penetration tests of products across a multi-cloud (AWS & GCP) environment, working in tandem with a peer pentester.
Review IAM policies, service configurations, and cloud-native permission structures across the Control Plane to ensure cloud configurations meet security baselines.
Execute dynamic testing against web interfaces and API endpoints (Data Plane & Web UI).
Assess the security posture of hybrid infrastructure spanning containers and virtual machines.
Triage findings, build clear and reproducible proofs-of-concept, and partner with product teams to explain risk and drive remediation.
Use AI and large language models to automate reconnaissance, generate attack vectors, analyze configurations, and draft vulnerability reports, applying strong prompt-engineering skills to security contexts.
Monitor bug bounty pipelines and external reports, validating findings and managing researcher communication.

Functional Competencies

Required:

Multi-Cloud Fluency: Deep architectural understanding of GCP and AWS. Capable of pivoting seamlessly between providers, performing manual configuration reviews of complex IAM/Resource hierarchies, and leveraging native APIs or modern CSPM frameworks to validate security controls.
Container Security: Proven experience auditing and hardening managed container services (GKE Autopilot/Standard, EKS, ECS) and self-hosted/unmanaged workloads (K8s, k3s, OCI-runc).
AI Tooling: Demonstrated ability to integrate AI/LLM tools (e.g., Gemini, Claude) into the pentesting lifecycle to increase speed and coverage.
Web Application Security: Expert-level knowledge of web application security principles and offensive testing methodologies, with deep proficiency in OWASP Top 10 vulnerabilities, modern web framework exploitation, and API security (REST, WebSockets). Extensive hands-on experience conducting manual security assessments using Burp Suite Professional, OWASP ZAP, or similar tooling. Strong understanding of browser security mechanisms (CSP, CORS, SameSite cookies, Subresource Integrity), secure authentication/authorization patterns (OAuth 2.0, OIDC, JWT), and security header configurations (HSTS, X-Frame-Options, Permissions-Policy). Proven ability to identify complex security flaws beyond automated scanner detection, validate findings through proof-of-concept development, and provide actionable remediation guidance to engineering teams.
Security Automation: Proficiency in Python, Go, or Bash to eliminate "toil" - writing custom scripts and tooling to automate vulnerability discovery, validate security controls, and streamline testing workflows.
Infrastructure as Code: Solid grasp of Terraform and cloud-native deployment patterns; able to interpret and audit complex HCL files to identify misconfigurations before they are provisioned.
Communication: Ability to write high-quality technical reports that Product Teams can easily understand and act upon.

Preferred / Nice to Have:

Experience with Gatekeeper policies and Binary Authorization.

Our Compensation and Benefits

At Menlo Security, Base Salary is one part of our competitive total compensation and benefits package and is determined using a salary range. The base salary range for this role is 158,000 CAD - 237,000 CAD.

In accordance with Canadian law, the range provided is Menlo Security’s reasonable estimate of the base compensation for this role. The actual amount may be higher or lower, based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. All employees may be eligible to become Menlo Security shareholders through eligibility for stock-based compensation grants, which are awarded to employees based on company and individual performance.

Menlo Security does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of Menlo Security.

Menlo Security is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

MSGL-I4

Why Menlo?

At Menlo, we don't settle for the status quo - in our technology or our culture. How we think and act is just as important as what we build. Our culture is defined by five core mindsets: Proactive Leadership, Straight Talk, United Impact, Elevated Talent, and Customer-Compelled. We take ownership and drive outcomes without waiting to be told. We communicate directly and seek hard truths. We break down silos and win together. We hold a high bar for ourselves and the people around us. And we treat every customer interaction as mission-critical. If you're someone who sees it, owns it, solves it, and does it - you'll thrive here.

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

TO ALL AGENCIES: Please, no phone calls or emails to any employee of Menlo Security outside of the Talent organization. Menlo Security’s policy is to only accept resumes from agencies via Ashby (ATS). Agencies must have a valid services agreement executed and must have been assigned by the Talent team to a specific requisition. Any resume submitted outside of this process will be deemed the sole property of Menlo Security. In the event a candidate submitted outside of this policy is hired, no fee or payment will be paid.

Apply About employer

More about this job

Responsibilities

Conduct deep-dive penetration tests across multi-cloud environments and assess the security posture of hybrid infrastructure. Triage external vulnerability reports and partner with product teams to drive remediation through clear proofs-of-concept.

Requirements

Requires deep architectural understanding of AWS and GCP, along with expertise in container security and web application security principles. Proficiency in Python, Go, or Bash and experience with AI-assisted security tooling are essential for this role.

Skills

Penetration testing
AWS
GCP
Container security
Kubernetes
Python
Go
Bash
Terraform
IAM
OWASP Top 10
Burp Suite
API security
Prompt engineering
Cloud security
Vulnerability assessment

Benefits

Stock-based compensation grants

Remote locations

Canada

Remote locations (standardized)

Canada

Visa sponsorship

Not detected in the job text

Keywords

Senior Security Engineer
Pentester
Multi-cloud
AWS
GCP
Container Security
Kubernetes
IAM
OWASP Top 10
Burp Suite
API Security
Python
Go
Bash
Terraform
AI
LLM
Bug Bounty
Vulnerability Management
Infrastructure as Code
Cloud-native
OAuth 2.0
OIDC
JWT
CSPM
Offensive Security
Defensive Security
Reconnaissance
Security Baselines
HCL

Report this job