Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 3 months ago
A
Stagiaire en Développement Cloud, Intern Cloud Developer – FCAP
Autodesk
Montreal, QC
- Full-time
Posséder une expérience en développement logiciel backend ou orienté objet, de préférence avec Java ou un langage similaire (Kotlin, C#, Python ou Go).
Added 3 months ago
C
Software Engineer – Margin Technology - Officer
Citi
Mississauga, ON
- Full-time
Engineer the future of global finance. At Citi, our Tech team doesn’t just support finance – we are helping to redefine it. Every day, $5 trillion crosses through our network. We do…
Added 3 months ago
ES
Senior Data Engineer
Euna Solutions
ON · Oakville, Ontario
- Full-time
Strong SQL and Python, and comfort with transformation tooling such as dbt.
Added 3 months ago
P
Senior Software Engineer C# .NET
Prophix
Remote, Canada
- Full-time
- Remote
As a Senior Software Engineer at Prophix, you'll play a central role in shaping the product that over 2,500 finance teams around the world rely on every day for budgeting, reporting, and…
Added 3 months ago
PI
Lead Data Engineer / Data Platform Lead
Princeton IT Services, Inc
Toronto, ON
- Full-time
Summary: This is a more senior and strategic Lead Data Engineer / Data Platform Lead role. In addition to hands-on engineering, it emphasizes technical leadership, enterprise architecture,…
Added 3 months ago
BC
Sr. Software Engineer (AI/ML)
Blackpoint Cyber
Remote, Canada
- $150,000 to $180,000 CAD / year
- Full-time
- Remote
…accelerate Blackpoint Cyber's ML/AI capability. As a Senior Software Engineer on this team, you'll own back-end systems and data/ML pipelines end-to-end, work cross-functionally across…
Added 3 months ago
BC
Software Engineer (AI/ML)
Blackpoint Cyber
Remote, Canada
- $128,000 to $158,000 CAD / year
- Full-time
- Remote
…accelerate Blackpoint Cyber's ML/AI capability. As a Software Engineer on this team, you'll build back-end systems and data pipelines within established architecture, working…
Added 4 months ago
MH
Senior Full-Stack Automation Engineer - Gravity
MedMe Health
Remote, Canada
- $115,000 to $176,000 CAD / year
- Full-time
- Remote
Full-Stack Ecosystem: Strong, hands-on experience with AWS, and SQL.
Added 4 months ago
FH
Senior Software Engineer - Fullstack
Function Health
Canada
- Full-time
Must have a problem-solving mindset, excellent communication skills, and the ability to clearly articulate technical concepts
Added 4 months ago
PI
Data Platform Engineer
Princeton IT Services, Inc
Toronto, Ontario
- Full-time
Design and develop Snowflake-native applications including Snowpark (Python), stored procedures, tasks, streams, and dynamic tables to support day-end processing engines that run natively…
Added 4 months ago
PI
Backend Engineer
Princeton IT Services, Inc
Toronto, Ontario
- Full-time
We are seeking a skilled Python Backend Engineer to build and scale high-performance backend systems. This role focuses on API development, platform engineering, and system design for…
Added 4 months ago
PI
Data Engineer
Princeton IT Services, Inc
Toronto, Ontario
- Full-time
Strong proficiency in Python (Snowpark/Connector) and advanced SQL optimization techniques.
Added 3 months ago
F
Data Engineer
Financeit
Remote, Canada
- Full-time
- Remote
We are looking for a skilled and detail-oriented Data Engineer to join our growing data team. In this role, you will be responsible for building and maintaining the data pipelines, models,…
Added 3 months ago
S
Senior DevOps Engineer
SimCorp
Toronto, ON
- Full-time
Proficiency in Azure pipelines, PowerShell, Python, AWS Lambda, and Azure scripting.
Added 2 months ago
Data Engineer
Lyft
Toronto, ON
Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role
Added 4 months ago
SG
Lead Penetration Test Engineer
S&P Global
Toronto, Ontario
- $135,000 to $180,000 CAD / year
- Full-time
Location: Hybrid 2 days per week onsite on one of our following sites:
Added 4 months ago
HG
Database Reliability Engineer
Humankind Global Recruitment
Halifax, Nova Scotia
- Full-time
Halifax (Hybrid-2 days in office)
Added 4 months ago
TH
Data Engineer II, Tim Hortons, Canada
Tim Hortons
Toronto, Ontario
- Full-time
Candidates should be comfortable working onsite 5 days per week out of our office in Toronto, ON
Added 4 months ago
C
Senior Software Engineer
Clutch
Toronto, Ontario
- $160,000 to $200,000 CAD / year
- Full-time
Microservices architecture using Docker, Terraform, AWS ECS, and other AWS services
Added 4 months ago
F
Staff Back End Engineer (Data Platform)
Forma.ai
Remote, Canada
- Full-time
- Remote
As a Staff Engineer, you are expected to operate with a high degree of ownership and trust. This includes proactively identifying architectural risks, surfacing edge cases or constraints…
Added 2 months ago
M
Senior Data Engineer
Morningstar
Toronto, ON
- Full-time
Manage SQL scripts, Python code, and Snowflake objects in a structured and maintainable way.
Added 4 months ago
C
Senior Software Engineer
Clutch
Toronto, Ontario
- $160,000 to $200,000 CAD / year
- Full-time
Microservices architecture using Docker, Terraform, AWS ECS, and other AWS services
Added 4 months ago
C
Senior Data Engineer
ClickUp
Canada
- Full-time
We're looking for a Staff Data Engineer to own the architecture and technical vision of our data platform. This is a high-leverage, high-autonomy role where you'll set the technical bar for…
Added 4 months ago
C
Senior Software Engineer
Clutch
Toronto, Ontario
- $160,000 to $200,000 CAD / year
- Full-time
Microservices architecture using Docker, Terraform, AWS ECS, and other AWS services
Added 5 months ago
J
Lead Marketing Data & Analytics Engineer
Jetson
North Vancouver, British Columbia
- Full-time
Strong SQL and Python. Deep SQL - you think in SQL, not around it. Python for the integrations Fivetran can't handle, for the stats SQL can't do cleanly, and for everything in between.

S&P Global

Lead Penetration Test Engineer

Toronto, ON, Canada

$135,000 to $180,000 CAD / year · Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Pay: $135,000 to $180,000 CAD / year
Job type: Full-time
Experience: Minimum 8 years of experience in information security with a strong focus on penetration testing, application security, and vulnerability management.
Posting language: English
Posted: Jul 13, 2026

Original job description

S&P Global Corporate

The Role: Lead Penetration Test Engineer

Location: Hybrid 2 days per week onsite on one of our following sites:

US: Boston, MA, Chicago, IL, Dallas, TX, Houston, TX, Englewood, CO, Raleigh, NC, Princeton, NJ, New York, NY, Southfield, MI, Washington, DC.

Canada: Toronto, ON, Calgary, AB

The Team:

The S&P Ratings Security team focuses on protecting our clients and users from modern security threats. Our mission is to safeguard systems and data by developing innovative solutions to the industry’s most complex security challenges. We are passionate problem solvers with deep security expertise.

Responsibilities and Impact:

We are seeking a Lead Penetration Test Engineer with extensive experience in penetration testing and offensive security. The ideal candidate will conduct penetration tests, re-testing, vulnerability scanning, and threat assessments across diverse environments. This role requires strong offensive security skills combined with cloud and application security expertise to identify vulnerabilities and develop effective mitigation strategies.

A successful candidate will excel in the following areas:

Penetration Testing & Vulnerability Assessments

Conduct comprehensive penetration testing of web applications, infrastructure, and cloud environments using both manual and automated techniques.

Develop custom scripts, tools, and methodologies to enhance penetration testing capabilities and automate security testing within CI/CD pipelines.

Apply cloud‑specific offensive techniques, including IAM abuse, container and serverless exploitation, and cloud misconfiguration testing.

Vulnerability Management & Remediation

Collaborate with engineering and development teams to analyze vulnerabilities, develop remediation plans, and strengthen application security across development and production lifecycles.

Perform detailed security assessments using DAST, SAST, and SCA tools to ensure continuous validation and improvement of security controls.

Attack Simulations & Research

Lead and participate in attack simulations and tabletop exercises to validate security controls and improve organizational response capabilities.

Research emerging threats, attack vectors, and adversarial techniques to inform offensive and defensive strategies.

Partner with internal teams to design and execute threat assessments based on intelligence feeds and threat actor analysis.

Security Communication & Reporting

Communicate and present penetration testing and security assessment findings to both technical and non‑technical stakeholders.

Provide actionable remediation guidance and risk mitigation strategies to strengthen the organization’s overall security posture.

What We’re Looking For

Basic Required Qualifications

Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience.

• Minimum 8 years of experience in information security with a strong focus on penetration testing, application security, and vulnerability management.

Hands-on experience with penetration testing tools (e.g., Burp Suite, Nessus, Metasploit, Nmap) and methodologies (e.g., OWASP Top 10, MITRE ATT&CK, PTES).

Expertise in identifying and exploiting common infrastructure and web application vulnerabilities (e.g., XSS, SQL Injection, IDOR).

Familiarity with vulnerability classification and scoring frameworks (CVE, CVSS, CWE).

Strong scripting or programming skills (e.g., Bash, Python, Go, PowerShell, JavaScript).

Experience performing security assessments (DAST, SAST, SCA, credential scanning) and integrating security testing into CI/CD pipelines.

Ability to translate complex technical findings into clear, actionable reports and confidently brief cross‑functional teams and executives.

At least one recognized offensive security certification (OSCP, OSCE3, OSEP, GXPN, GPEN, or CREST CRT/CCT).

Preferred Qualifications

Experience with cloud security across AWS, Azure, or GCP.

Knowledge of AI/ML security and adversarial testing methods, including evaluating LLMs and other models for manipulation, evasion, and data integrity risks.

Demonstrated involvement in the infosec community (e.g., open-source projects, bug bounties, CVE research, conference talks, or security publications).

Experience applying the MITRE ATT&CK Framework to offensive security operations and threat emulation.

Familiarity with secure software development practices and the software development lifecycle.

Experience with Java application technologies, deployment frameworks, and associated security best practices.

Ability to work collaboratively across teams while independently owning deliverables and maintaining accountability to deadlines.

Right to work requirements for Canada based out Candidates:

This role is open for candidates with indefinite right to work within Canada.

Compensation/Benefits Information: (This section is only applicable to Canadian Candidates:) S&P Global states that the anticipated range of compensation for this position is 135,000 CAD to 180,000 CAD. Final compensation for this role will be based on the individual’s performance, geographic location, as well as experience level, skill set, training, licenses, and certifications. In accordance with Ontario's new regulations effective January 1, 2026, this job posting provides information on expected compensation. S&P Global will not be utilizing artificial intelligence in our hiring process. Additionally, we are committed to transparency and will inform all interviewed candidates of hiring decisions within 45 days of their interview. This posting is for an existing vacancy, and we encourage you to reach out for further information regarding our hiring practices or any questions you may have. Thank you for considering a career with us!

Apply on LinkedIn About employer

More about this job

Responsibilities

The Lead Penetration Test Engineer will conduct penetration tests, vulnerability scanning, and threat assessments across diverse environments. This role involves collaborating with teams to analyze vulnerabilities and develop effective remediation strategies.

Requirements

Candidates must have a bachelor's degree or equivalent experience and a minimum of 8 years in information security with a focus on penetration testing. Strong skills in penetration testing tools and methodologies, as well as scripting or programming, are required.

Skills

Penetration Testing
Vulnerability Assessments
Cloud Security
Application Security
Scripting
Security Assessments
Threat Assessments
Security Communication
Risk Mitigation
Offensive Security
Vulnerability Management
CI/CD Integration
Emerging Threats
Attack Simulations
Security Reporting
Collaboration

Visa sponsorship

Not detected in the job text

Keywords

Penetration Testing
Vulnerability Assessments
Cloud Security
Application Security
Burp Suite
Nessus
Metasploit
Nmap
OWASP
MITRE ATT&CK
XSS
SQL Injection
IAM
CI/CD
DAST
SAST
SCA
Python
Bash
Go
PowerShell
JavaScript
AI/ML Security
Threat Intelligence
Security Controls
Risk Mitigation
Open-Source Projects
Bug Bounties
CVE Research
Java

Report this job

Work requirements

Jobs in Canada