Penetration Tester position at Malleum focusing on cybersecurity vulnerabilities and threat simulations. Engaging with government and enterprise clients to strengthen national and allied security frameworks.
Responsibilities
Conduct web, network, mobile, and API penetration tests to identify vulnerabilities.
Support team assessments, simulating real-world attack scenarios.
Develop and execute custom exploits, scripts, and attack chains.
Conduct source code reviews for security weaknesses in applications.
Assess cloud security in AWS, Azure, and GCP, as well as containerized environments like Docker and Kubernetes.
Collaborate with blue teams, SOC analysts, and developers to remediate findings.
Write detailed technical reports and present findings to technical and non-technical stakeholders.
Stay updated on zero-day vulnerabilities, APT tactics, and emerging threats.
Participate in CTFs, security research, and bug bounty programs to refine skills.
Requirements
3-5 years of hands-on penetration testing experience.
Proficiency in manual testing techniques beyond automated scanning.
Strong knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
Experience with Active Directory attacks, privilege escalation, and lateral movement.
Skilled in the use of some or all of: Burp Suite, Nessus, Metasploit, Kali Linux.
Familiarity with scripting in Python, PowerShell, Bash, or Ruby.
Understanding of secure coding practices and DevSecOps principles.
Excellent communication and interpersonal skills.
Benefits
Competitive compensation, performance incentives, and comprehensive benefits
Continuous learning budget, certification sponsorship, and clear paths to senior leadership
QA Tester validating SAP, CRM, and AWS data integration for Circular Materials, a national recycling producer responsibility organization. Executing integration tests, reconciliation, and defect resolution.
Senior AI Quality Engineer defining evaluation standards and automation for LLM and agentic workflows. Testing AI - powered safety and operational risk - management software at Novara.
QA Team Lead overseeing laboratory testing, food safety, and quality systems at Nestlé Canada’s Toronto factory. Supervising technical teams and supporting audits, traceability, and product release.
Quality Assurance Analyst testing Ava Industries’ cloud - based EMR software. Validating clinic workflows, releases, defects, and user experience for Canadian healthcare providers.
Ingénieur qualité logicielle chez EDC, société canadienne aidant les entreprises à réussir à l’étranger. Automatisation des tests, validation assistée par l’IA et intégration de bout en bout.
QA Analyst testing Creator.co’s influencer marketing platform across web and mobile. Applying AI tools to manual testing, bug reporting, and emerging test automation.
FCRM Quality Assurance Analyst reviewing high - risk customers and EDD compliance for TD, a major North American bank. Supporting AML controls, regulatory reporting and financial crime risk programs.
QA Audio Rater auditing production audio ratings and correcting calibration issues. Supporting Welo Data’s AI services program remotely from Canada for 10 hours weekly.
Senior QA Analyst testing Nelson’s digital K - 12 learning products across frontend, backend, API, and database layers. Building automation and investigating accessibility, performance, and infrastructure quality issues.