Join Fortinet as a Security Researcher/Pentester to evaluate and secure cloud services using AI techniques. Engage in technical penetration testing and adversarial research on innovative products.
Responsibilities
Conduct regularly penetration tests and security evaluations on Fortinet cloud products
Investigating and Writing POCs for published vulnerabilities
Red team activities focused on developing AI-assisted scripts
Collecting threat intelligence and maintaining traditional Pentest tools
Conduct AI red team exercises targeting LLM-integrated cloud services
Perform LLM fine-tuning and abliteration research
Develop and operate LLM-powered penetration testing pipelines
Research and document adversarial attack surfaces unique to AI-powered products
Requirements
3+ years of dedicated experience in information security role with strong pen-tester practiced background
Professional penetration test skills on information technologies including operation systems, software frameworks, database, web applications and networks
Strong knowledge of the fundamentals of web applications including authentication, authorization, session management, HTTP protocol, and web language
Proven skills with traditional pen-test tools (Nessus, Burp Suite, Nuclei, SQLmap)
Demonstrated practices of using Kali Linux / Metasploit to craft POCs for known vulnerabilities
Hands-on experience with LLM fine-tuning frameworks and techniques
Proficiency in using LLMs and AI agents for offensive cloud security
Familiarity with AI/ML cloud service attack surfaces
Certifications such as OSCP, OSWE, HTB CPTS, HTB CWEE are highly valued
Benefits
100% company paid medical, dental, and vision coverage
Health Spending Account
Personal Spending Account
Employee & Family Assistance Plan (EFAP)
Critical illness, disability, and life insurance
Group Registered Retirement Savings Plan (RRSP) with company match
Competitive Paid Time Off
Flexible leave policies including paid health days
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.