Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 4 months ago
FH
Senior Software Engineer - Fullstack
Function Health
Canada
- Full-time
Must have a problem-solving mindset, excellent communication skills, and the ability to clearly articulate technical concepts
Added 4 months ago
PI
Data Platform Engineer
Princeton IT Services, Inc
Toronto, Ontario
- Full-time
Design and develop Snowflake-native applications including Snowpark (Python), stored procedures, tasks, streams, and dynamic tables to support day-end processing engines that run natively…
Added 4 months ago
PI
Backend Engineer
Princeton IT Services, Inc
Toronto, Ontario
- Full-time
We are seeking a skilled Python Backend Engineer to build and scale high-performance backend systems. This role focuses on API development, platform engineering, and system design for…
Added 4 months ago
PI
Data Engineer
Princeton IT Services, Inc
Toronto, Ontario
- Full-time
Strong proficiency in Python (Snowpark/Connector) and advanced SQL optimization techniques.
Added 3 months ago
F
Data Engineer
Financeit
Remote, Canada
- Full-time
- Remote
We are looking for a skilled and detail-oriented Data Engineer to join our growing data team. In this role, you will be responsible for building and maintaining the data pipelines, models,…
Added 3 months ago
S
Senior DevOps Engineer
SimCorp
Toronto, ON
- Full-time
Proficiency in Azure pipelines, PowerShell, Python, AWS Lambda, and Azure scripting.
Added 2 months ago
Data Engineer
Lyft
Toronto, ON
Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role
Added 4 months ago
SG
Lead Penetration Test Engineer
S&P Global
Toronto, Ontario
- $135,000 to $180,000 CAD / year
- Full-time
Location: Hybrid 2 days per week onsite on one of our following sites:
Added 4 months ago
HG
Database Reliability Engineer
Humankind Global Recruitment
Halifax, Nova Scotia
- Full-time
Halifax (Hybrid-2 days in office)
Added 4 months ago
TH
Data Engineer II, Tim Hortons, Canada
Tim Hortons
Toronto, Ontario
- Full-time
Candidates should be comfortable working onsite 5 days per week out of our office in Toronto, ON
Added 4 months ago
C
Senior Software Engineer
Clutch
Toronto, Ontario
- $160,000 to $200,000 CAD / year
- Full-time
Microservices architecture using Docker, Terraform, AWS ECS, and other AWS services
Added 4 months ago
F
Staff Back End Engineer (Data Platform)
Forma.ai
Remote, Canada
- Full-time
- Remote
As a Staff Engineer, you are expected to operate with a high degree of ownership and trust. This includes proactively identifying architectural risks, surfacing edge cases or constraints…
Added 2 months ago
M
Senior Data Engineer
Morningstar
Toronto, ON
- Full-time
Manage SQL scripts, Python code, and Snowflake objects in a structured and maintainable way.
Added 4 months ago
C
Senior Software Engineer
Clutch
Toronto, Ontario
- $160,000 to $200,000 CAD / year
- Full-time
Microservices architecture using Docker, Terraform, AWS ECS, and other AWS services
Added 4 months ago
C
Senior Data Engineer
ClickUp
Canada
- Full-time
We're looking for a Staff Data Engineer to own the architecture and technical vision of our data platform. This is a high-leverage, high-autonomy role where you'll set the technical bar for…
Added 4 months ago
C
Senior Software Engineer
Clutch
Toronto, Ontario
- $160,000 to $200,000 CAD / year
- Full-time
Microservices architecture using Docker, Terraform, AWS ECS, and other AWS services
Added 5 months ago
J
Lead Marketing Data & Analytics Engineer
Jetson
North Vancouver, British Columbia
- Full-time
Strong SQL and Python. Deep SQL - you think in SQL, not around it. Python for the integrations Fivetran can't handle, for the stats SQL can't do cleanly, and for everything in between.
Added 4 months ago
PI
Data Platform Engineer
Princeton IT Services, Inc
Toronto, Ontario
- Contract
Design and develop Snowflake-native applications including Snowpark (Python), stored procedures, tasks, streams, and dynamic tables to support day-end processing engines that run natively…
Added 3 months ago
Software Developer - Data Reliability
Squarepoint Capital
Montreal, QC
As a Reliability Software Engineer on the Data team, you will be central to the infrastructure and operations that keep Squarepoint's data ecosystem running at scale. Our mandate is broad…
Added 4 months ago
T
Senior Data Engineer
Techedin
Toronto, Ontario
- Full-time
Strong experience with Python, Spark (PySpark, Spark SQL), and SQL
Added 3 months ago
S
Senior Data Engineer
ShyftLabs
Toronto, ON
- Full-time
ShyftLabs is seeking an experienced Senior / Lead Data Engineer to lead the design, architecture, and delivery of enterprise-scale data platforms for Fortune 500 organizations. This is a…
Added 4 months ago
E
Senior Fullstack Engineer (Node. js)
Experity
Chiasson Office, NB
- Full-time
Advanced to Expert-level proficiency in public cloud architectures (AWS, Azure, or GCP) Microservices and distributed systems design.
Added 5 months ago
KS
Data Engineer
KPI Sight
Toronto, Ontario
- $120,000 CAD / year
- Full-time
The Data Engineer will design, build, and maintain data pipelines that power KPI Sight’s dashboards and analytics. Much of this role will involve migrating outdated pipelines to a new…
Added 3 months ago
BS
Tech Lead - ToolHound
Beacon Software
Remote, Canada
- Full-time
- Remote
A genuine generalist ("jack of all trades"). You're T-shaped, deep in .NET now, but you pick up new languages, stacks, and clouds quickly and enjoy it. You can move across web, mobile,…
Added 5 months ago
F
Senior Back End Engineer (Data Platform)
Forma.ai
Toronto, Ontario
- $150,000 to $190,000 CAD / year
- Full-time
As a Senior Engineer, Data Platform, you are expected to operate with strong ownership and sound technical judgment. This includes identifying risks in the work you own, surfacing edge…

S&P Global

Lead Penetration Test Engineer

Toronto, ON, Canada

$135,000 to $180,000 CAD / year · Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Pay: $135,000 to $180,000 CAD / year
Job type: Full-time
Experience: Minimum 8 years of experience in information security with a strong focus on penetration testing, application security, and vulnerability management.
Posting language: English
Posted: Jul 13, 2026

Original job description

S&P Global Corporate

The Role: Lead Penetration Test Engineer

Location: Hybrid 2 days per week onsite on one of our following sites:

US: Boston, MA, Chicago, IL, Dallas, TX, Houston, TX, Englewood, CO, Raleigh, NC, Princeton, NJ, New York, NY, Southfield, MI, Washington, DC.

Canada: Toronto, ON, Calgary, AB

The Team:

The S&P Ratings Security team focuses on protecting our clients and users from modern security threats. Our mission is to safeguard systems and data by developing innovative solutions to the industry’s most complex security challenges. We are passionate problem solvers with deep security expertise.

Responsibilities and Impact:

We are seeking a Lead Penetration Test Engineer with extensive experience in penetration testing and offensive security. The ideal candidate will conduct penetration tests, re-testing, vulnerability scanning, and threat assessments across diverse environments. This role requires strong offensive security skills combined with cloud and application security expertise to identify vulnerabilities and develop effective mitigation strategies.

A successful candidate will excel in the following areas:

Penetration Testing & Vulnerability Assessments

Conduct comprehensive penetration testing of web applications, infrastructure, and cloud environments using both manual and automated techniques.

Develop custom scripts, tools, and methodologies to enhance penetration testing capabilities and automate security testing within CI/CD pipelines.

Apply cloud‑specific offensive techniques, including IAM abuse, container and serverless exploitation, and cloud misconfiguration testing.

Vulnerability Management & Remediation

Collaborate with engineering and development teams to analyze vulnerabilities, develop remediation plans, and strengthen application security across development and production lifecycles.

Perform detailed security assessments using DAST, SAST, and SCA tools to ensure continuous validation and improvement of security controls.

Attack Simulations & Research

Lead and participate in attack simulations and tabletop exercises to validate security controls and improve organizational response capabilities.

Research emerging threats, attack vectors, and adversarial techniques to inform offensive and defensive strategies.

Partner with internal teams to design and execute threat assessments based on intelligence feeds and threat actor analysis.

Security Communication & Reporting

Communicate and present penetration testing and security assessment findings to both technical and non‑technical stakeholders.

Provide actionable remediation guidance and risk mitigation strategies to strengthen the organization’s overall security posture.

What We’re Looking For

Basic Required Qualifications

Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience.

• Minimum 8 years of experience in information security with a strong focus on penetration testing, application security, and vulnerability management.

Hands-on experience with penetration testing tools (e.g., Burp Suite, Nessus, Metasploit, Nmap) and methodologies (e.g., OWASP Top 10, MITRE ATT&CK, PTES).

Expertise in identifying and exploiting common infrastructure and web application vulnerabilities (e.g., XSS, SQL Injection, IDOR).

Familiarity with vulnerability classification and scoring frameworks (CVE, CVSS, CWE).

Strong scripting or programming skills (e.g., Bash, Python, Go, PowerShell, JavaScript).

Experience performing security assessments (DAST, SAST, SCA, credential scanning) and integrating security testing into CI/CD pipelines.

Ability to translate complex technical findings into clear, actionable reports and confidently brief cross‑functional teams and executives.

At least one recognized offensive security certification (OSCP, OSCE3, OSEP, GXPN, GPEN, or CREST CRT/CCT).

Preferred Qualifications

Experience with cloud security across AWS, Azure, or GCP.

Knowledge of AI/ML security and adversarial testing methods, including evaluating LLMs and other models for manipulation, evasion, and data integrity risks.

Demonstrated involvement in the infosec community (e.g., open-source projects, bug bounties, CVE research, conference talks, or security publications).

Experience applying the MITRE ATT&CK Framework to offensive security operations and threat emulation.

Familiarity with secure software development practices and the software development lifecycle.

Experience with Java application technologies, deployment frameworks, and associated security best practices.

Ability to work collaboratively across teams while independently owning deliverables and maintaining accountability to deadlines.

Right to work requirements for Canada based out Candidates:

This role is open for candidates with indefinite right to work within Canada.

Compensation/Benefits Information: (This section is only applicable to Canadian Candidates:) S&P Global states that the anticipated range of compensation for this position is 135,000 CAD to 180,000 CAD. Final compensation for this role will be based on the individual’s performance, geographic location, as well as experience level, skill set, training, licenses, and certifications. In accordance with Ontario's new regulations effective January 1, 2026, this job posting provides information on expected compensation. S&P Global will not be utilizing artificial intelligence in our hiring process. Additionally, we are committed to transparency and will inform all interviewed candidates of hiring decisions within 45 days of their interview. This posting is for an existing vacancy, and we encourage you to reach out for further information regarding our hiring practices or any questions you may have. Thank you for considering a career with us!

Apply on LinkedIn About employer

More about this job

Responsibilities

The Lead Penetration Test Engineer will conduct penetration tests, vulnerability scanning, and threat assessments across diverse environments. This role involves collaborating with teams to analyze vulnerabilities and develop effective remediation strategies.

Requirements

Candidates must have a bachelor's degree or equivalent experience and a minimum of 8 years in information security with a focus on penetration testing. Strong skills in penetration testing tools and methodologies, as well as scripting or programming, are required.

Skills

Penetration Testing
Vulnerability Assessments
Cloud Security
Application Security
Scripting
Security Assessments
Threat Assessments
Security Communication
Risk Mitigation
Offensive Security
Vulnerability Management
CI/CD Integration
Emerging Threats
Attack Simulations
Security Reporting
Collaboration

Visa sponsorship

Not detected in the job text

Keywords

Penetration Testing
Vulnerability Assessments
Cloud Security
Application Security
Burp Suite
Nessus
Metasploit
Nmap
OWASP
MITRE ATT&CK
XSS
SQL Injection
IAM
CI/CD
DAST
SAST
SCA
Python
Bash
Go
PowerShell
JavaScript
AI/ML Security
Threat Intelligence
Security Controls
Risk Mitigation
Open-Source Projects
Bug Bounties
CVE Research
Java

Report this job

Work requirements

Jobs in Canada