Jobs in Canada

25+ jobs

Save this search

Added 4 days ago
Penetration Tester
RBC
Vancouver, BC · Toronto, ON
Full-time
…quality of RBC applications. Reporting to the Senior Manager of Penetration Testing, you will provide application penetration testing services for the global RBC business and application…
Added 4 days ago
Senior Penetration Tester & Red Team Engineer
Cognizant
Toronto, ON
Full-time
We are seeking a Senior Penetration Tester / Red Team Engineer to support offensive security initiatives through advanced penetration testing, red team operations, and custom security tool…
Added 4 days ago
Penetration Tester
Royal Bank of Canada
Vancouver, BC · Toronto, ON
Full-time
…quality of RBC applications. Reporting to the Senior Manager of Penetration Testing, you will provide application penetration testing services for the global RBC business and application…
Added 4 days ago
Penetration Tester
RBC
Toronto, ON
Full-time
…quality of RBC applications. Reporting to the Senior Manager of Penetration Testing, you will provide application penetration testing services for the global RBC business and application…
Added 1 month ago
Offensive Security - Penetration Tester
RSM Canada
Toronto, ON
Full-time
Conduct manual penetration testing on web applications, network devices, and other systems
Added 1 month ago
Cybersecurity Penetration Tester
CGI
Mississauga, ON
Full-time
We are seeking an experienced Penetration Tester / Offensive Security Consultant to assess the security posture of applications, infrastructure, cloud environments, and network systems…
Added 21 days ago
Web Application Penetration Tester
Wawanesa Insurance
Toronto, ON · Winnipeg, MB · Moncton, NB · Ottawa, ON · Kitchener, ON · Montreal, QC · Vancouver, BC · Dartmouth, NS · Edmonton, AB · Calgary, AB · Hybrid - Canada, ON · North York - Toronto, ON (Hybr, ON
The Web Application Penetration Tester role will contribute to Wawanesa’s success by helping to deliver security testing services to our enterprise client groups. This role will ensure that…
Added 1 month ago
Offensive Security - Penetration Tester
RSM US LLP
Toronto, Ontario
Full-time
Conduct manual penetration testing on web applications, network devices, and other systems
Added 5 days ago
Senior Quality Assurance Specialist
Maarut Inc
Toronto, ON
Contract
…cases and executing these against the various components. The tester will work with the testing lead and IT lead of each project as well as the project team members in the analysis, design,…
Added 26 days ago
Offensive Security Lead - Penetration Testing
RSM Canada
Toronto, ON
Full-time
One or more of the following testing certifications: Certified Ethical Hacker (CEH); GIAC Certified Penetration Tester (GPEN); Offensive Security Certified Professional (OSCP); or…
Added 6 days ago
Cloud Security Specialist
Fortinet
Burnaby, BC
Full-time
5+ years of dedicated experience in security engineering role, e.g. Security Engineer, Penetration Tester or DevSecOps/SRE.
Added 17 days ago
Cybersecurity Consultant II
GLI Secure
Moncton, NB
Full-time
GLI Secure is seeking an experienced Cybersecurity Consultant II (penetration tester) at our Moncton, NB location.
Added 20 days ago
RQ11402 - Systems Testing/QA Specialist - Senior
Maarut
Toronto, ON
Contract
components. The tester will work with the testing lead and IT lead of each
Added 20 days ago
RQ11322 - Solutions Designer - Senior
Maarut
Toronto, ON
Contract
components. The tester will work with the testing lead and IT lead of each
Added 16 days ago
Cybersecurity Consultant II
The GLI Group
Moncton, NB
GLI Secure is seeking an experienced Cybersecurity Consultant II (penetration tester) at our Moncton, NB location.
Added 1 month ago
Senior Ethical Hacker
Stantec
Toronto, ON
Full-time
GIAC Web Application Penetration Tester (GWAPT)
Added 1 month ago
Senior Information Security Analyst (Secure Code Review)
TD
Toronto, ON
Full-time
We are seeking a skilled and experienced Secure Code Reviewer / Penetration Tester to join our team. As a Secure Code Reviewer / Penetration Tester, you will be responsible for identifying…
Added 7 days ago
RQ11402 - QA Specialist – Senior
A.T. Consulting & Recruiting Inc.
Toronto, ON
Contract
…cases and executing these against the various components. The tester will work with the testing lead and IT lead of each project as well as the project team members in the analysis, design,…
Added 8 days ago
Développeur Systèmes Embarqués
SII Canada
Quebec, QC
Full-time
Concevoir, programmer et tester des logiciels destinés à être déployés sur des systèmes embarqués.
Added 8 days ago
Développeur Systèmes Embarqués
Groupe SII
Quebec, QC
Full-time
Concevoir, programmer et tester des logiciels destinés à être déployés sur des systèmes embarqués.
Added 8 days ago
Développeur Systèmes Embarqués Cybersécurité
SII Canada
Quebec, QC
Full-time
Concevoir, programmer et tester des logiciels pouvant être déployés sur des systèmes embarqués.
Added 8 days ago
Développeur Systèmes Embarqués Cybersécurité
Groupe SII
Quebec, QC
Full-time
Concevoir, programmer et tester des logiciels pouvant être déployés sur des systèmes embarqués.
Added 4 months ago
Manager, Cyber Resilience & Offensive Security
EQ Bank
Toronto, Ontario
Full-time
…Professional), OSCE (Offensive Security Certified Expert), GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CEH (Certified Ethical Hacker),…
Added 4 months ago
Manager, Cyber Resilience & Offensive Security
EQ Bank | Canada's Challenger Bank
Toronto, ON
Full-time
…Professional), OSCE (Offensive Security Certified Expert), GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CEH (Certified Ethical Hacker),…
Added 4 months ago
Security Researcher
Fortinet
Burnaby, British Columbia
Full-time
You would act as a Security Researcher/Penetration Tester. This is a highly technical role, combining cutting-edge AI and LLM-powered attack techniques with traditional penetration testing…

RSM Canada

Offensive Security Lead - Penetration Testing

Toronto, ON, Canada

Pay: Compensation Range: $98,000 - $180,400
Job type: Full-time
Apply by: Jan 20, 2027
Experience: This position is for individuals with 4+ years of experience within the cyber security space, with a preference for prior consulting or professional services backgrounds.
Posting language: English
Posted: Aug 25, 2026

Apply About employer

Applications open in a new tab.

Original job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

We are currently looking for team members to join our Security, Privacy, and Risk Consulting practice. The candidate will work with teams of security and privacy staff in a wide variety of systems environments. Our Security, Privacy and Risk Consulting team serves the Information Security and Data Privacy related needs of our clients. This team helps organizations identify their cyber risk, and design and implement program to address those risks and improve their cyber security posture. We serve a diverse base of clients in a variety of industries and understanding how technology impacts the operation and growth of organizations is what we do best. We are seeking individuals skilled at performing vulnerability assessments, penetration testing, and secure architecture reviews of a variety of operating systems, network devices, wireless solutions, and their related infrastructure.

Examples Of Candidate's Responsibilities Include

Perform analysis and testing to verify the strengths and weaknesses of client IT environments utilizing commercial and open source security testing tools
Perform Internet penetration testing (blackbox/greybox /whitebox testing) and network architecture reviews (manual/automated)
Perform other security testing tasks such as wireless penetration testing, social engineering campaigns (email, web, phone, physical, etc.), mobile application testing, embedded device testing, and similar activities meant to identify critical weaknesses within client environments
Assist with the development of remediation recommendations for identified findings
Identify and clearly articulate (written and verbal) findings to senior management and clients
Help identify improvement opportunities for assigned clients
Supervise and provide engagement management for other staff working on assigned engagements

Required Qualifications

This position is for individuals with 4+ years of experience within the cyber security space, with a preference for prior consulting or professional services backgrounds. Other candidates may be considered based on experience and skill sets.
Ability to travel as needed
Must possess a high degree of integrity and confidentiality, as well as the ability to adhere to both company policies and best practices
Strong verbal and written abilities
Strong multitasking and project management skills

Preferred Qualifications

Bachelor's degree in computer science or related field from an accredited college/university
Technical background in networking/system administration, security testing or related fields
In-depth knowledge of TCP/IP
Two or more years of Perl, Python, Bash, or C experience
Operating System Configuration and Security experience (Windows, HP-UX, Linux, Solaris, AIX, etc.)
Configuration and Security experience with firewalls, switches, routers, VPNs
Experience with security and architecture testing and development frameworks, such as the Open Web
Application Security Project (OWASP), Open Source Security Testing Methodology Manual (OSSTMM), the Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), and NIST SP800-115
Familiar with security testing techniques such as threat modeling, network discovery, port and service identification, vulnerability scanning, network sniffing, penetration testing, configuration reviews, firewall rule reviews, social engineering, wireless penetration testing, fuzzing, and password cracking and can perform these techniques from a variety of adversarial perspectives (white-, grey-, black-box)
Experience with discovering, utilizing, and possibly writing exploits for such vulnerabilities as buffer and stack overflows
Familiar with the logistics of security testing such as acquiring authorization for testing, reporting, risk analysis of findings, data handling, and legal considerations
Commercial Application Security tools experience (Nessus, Nexpose, Qualys, Appdetective, Appscan, etc.) Open source and free tools experience (Kali Linux suite, Metasploit, nmap, airsnort, Wireshark, Burp Suite, Paros, etc.)
One or more of the following testing certifications: Certified Ethical Hacker (CEH); GIAC Certified Penetration Tester (GPEN); Offensive Security Certified Professional (OSCP); or equivalent development or testing certification (ECSA, CEPT, CPTE, CPTS, etc)
In addition, one or more of the following governance certifications is preferred: Certified Information Systems Security Professionals® (CISSP®); Certified Information Systems Auditor® (CISA®); Certified Information Security Manager® (CISM®)
Strong leadership and communication skills, technical knowledge, and the ability to write at a "publication" quality level in order to communicate findings and recommendations to the client's senior management

At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmcanada.com/careers/life-at-rsm/rewards-and-benefits.html.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Canadian uniformed service; Canadian Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at [email protected].

At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.

Compensation Range: $98,000 - $180,400

Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.

Apply About employer

More about this job

Responsibilities

The candidate will perform various security testing activities including penetration testing, vulnerability assessments, and social engineering campaigns to identify critical weaknesses. They will also assist in developing remediation recommendations and provide engagement management for other staff members.

Requirements

Candidates must have 4+ years of experience in the cybersecurity space, preferably within a consulting or professional services background. Strong technical knowledge in networking, system administration, and security testing frameworks is required, along with excellent communication skills.

Skills

Penetration testing
Vulnerability assessments
Network architecture reviews
Social engineering
Wireless penetration testing
Mobile application testing
Embedded device testing
TCP/IP
Python
Bash
Perl
C
Metasploit
Burp Suite
Wireshark
Nmap

Benefits

Competitive benefits
Compensation package
Flexibility in schedule

Visa sponsorship

Not detected in the job text

Keywords

Offensive Security
Penetration Testing
Vulnerability Assessment
Cyber Risk
Network Architecture
Social Engineering
OWASP
OSSTMM
PTES
NIST SP800-115
Kali Linux
Metasploit
Nessus
Burp Suite
TCP/IP
Python
Bash
Perl
C
CISSP
CISA
CISM
OSCP
GPEN
CEH
Threat Modeling
Fuzzing
Password Cracking
Consulting
Information Security

Report this job