Penetration Tester (Application Security)

Location: Fully remote within Canada

Salary: CAD 90,000–120,000 per year

Company

hirify.global provides tailored penetration testing services focused on identifying weaknesses that automated vulnerability assessments may overlook and helping clients improve privacy and security.

What you will do

• Perform penetration testing of web applications, mobile applications, thick clients, and APIs.
• Conduct source code reviews and white-box testing to prove the impact of application flaws.
• Reverse engineer mobile and thick-client applications.
• Chain application flaws into cloud and on-premises Active Directory infrastructure where approved.
• Perform SAST and DAST on enterprise, SaaS, and custom in-house applications, validating scanner results and eliminating false positives.
• Produce detailed findings and remediation reports and debrief results for technical and executive audiences.

Requirements

• Experienced developer or application security tester with at least two years of information-security-related experience.
• Solid working knowledge of C, C#, Python, Objective-C, Java, JavaScript, SQL, and frameworks such as AngularJS.
• Familiarity with XML, JSON, SOAP, REST, AJAX, and web services.
• Understanding of application weaknesses involving AI and LLMs.
• Extensive experience using an attack proxy such as Burp Suite; OSCP or Burp Suite experience is mandatory.
• Strong understanding of OWASP for web, API, mobile, and AI/LLM security.
• Experience with scanners and validation or elimination of false positives.
• Post-secondary college or university degree.
• Professional qualification such as OSCP, OSWE, or BSCP.

Nice to have

• Three to five years of experience in penetration testing and consulting.

Culture & Benefits

• Fully remote work within Canada with a flexible environment.
• Immediate and ongoing offensive-security training, mentorship, and professional development.
• Opportunities to contribute to the growth, direction, and methodology of the hardware practice.
• Collaboration with a highly skilled security team focused on technical quality and disciplined execution.
• Corporate-matched GRRSP and corporate benefit plans in Canada.