Senior Security Engineer, Offensive Security

What you'll do

• Plan and execute penetration tests and red-team or adversary-emulation engagements; develop exploits and provide remediation guidance.
• Perform security reviews and threat modeling, including for AI products, and build offensive security tooling and automated tests.
• Partner with engineering and product teams on security architecture, vulnerability management, and incident response.

What they ask for

• 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure.
• 2+ years of hands-on development experience in Python or Golang.
• Hands-on experience securing cloud ecosystems and penetration testing SaaS web applications and APIs, including manual exploitation.
• Expertise in authentication, authorization, OAuth, cryptography applications, and Zero Trust principles.

Nice to have

• Offensive security certifications such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO; published CVEs, security research, or conference talks.
• Experience with container escape, Kubernetes attack paths, cloud red teaming, or testing AI/ML systems.

Pay

CA$271,150 – CA$434,000 CAD base salary; $194,150 – $312,950 USD base salary

Tools

Python, Golang, AWS, GCP, Azure, OAuth, Burp Suite, OWASP

AI focus

Review and test emerging AI/ML products and understand risks including prompt injection, data poisoning, model extraction, and adversarial attacks; use LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting.