Security Consultant – Penetration Testing

About iGears

iGears Canada is the Edmonton office of iGears Technology Limited, a software company founded in Hong Kong in 2004. We develop and run 20 of our own SaaS products and have shipped 200+ apps for clients including listed companies, public-sector bodies, NGOs, universities and churches. Our Edmonton office opened in 2024, and we are now building a cybersecurity team in Canada to deliver penetration testing for clients and to secure our own platforms.

Work arrangements

Full-time and part-time arrangements are welcome. On-site or hybrid arrangements are welcome.

What you’ll do

• Plan and run penetration tests of web applications, APIs and mobile apps for clients in Canada and Hong Kong, following OWASP WSTG, ASVS and MASVS
• Test how applications connect to third-party services (OAuth, webhooks, payment and messaging APIs) and cloud environments
• Verify every finding by hand, rate risk with CVSS, and write clear reports with fix guidance for developers and management
• Retest fixes and issue verification letters
• Scope engagements with clients: rules of engagement, test accounts, testing windows and written authorisation
• Test and harden iGears’ own SaaS platforms, and coach our developers on secure coding
• Work with our Hong Kong team on joint engagements across time zones

What you’ll bring

• OSCP, or an equivalent hands‑on certification (e.g. CREST CRT or CCT, GIAC GPEN or GWAPT, eWPTX, PNPT)
• At least 2 years of hands‑on penetration testing, with web application and API testing as core skills
• Strong command of Burp Suite and common testing tools; scripting in Python, Bash or similar
• Clear written English for client reports
• Legal entitlement to work in Canada

Nice to have

• OSWE, OSEP, BSCP or CREST CCT APP
• Mobile (iOS/Android), Active Directory or cloud (AWS, Azure, GCP) testing
• Source code review
• Experience testing applications in regulated sectors such as financial services
• CVEs, bug bounty findings or a CTF track record

What we offer

• CAD $80,000–110,000 a year, depending on experience and certifications
• Real client engagements, plus 20 in-house SaaS products to test and secure
• A founding role in our Canadian security team, reporting to our CTO
• Paid vacation, health and dental cover where eligible, and support for relevant training and certification exams

Explore our platforms before you apply

• AI: GenCMS (gen-cms.com), AskCore (askcore.org), HumanLevelUP (humanlevelup.org), PromoPilot (promo-pilot.org), Webetter (webetter.co), PhotoCen (photocen.com), Duckbot (duckbot.hk, preview)
• Business operations: fileEC (fileec.com), InsightBook (insightbook.org), HRFlowTech (hrflowtech.com), MemberSys (membersys.org), AppointSys (appointsys.org), Paperless.Cards (paperless.ca rds)
• Messaging and marketing: SendPromotion.Email (sendpromotion.email), SendSMS.click (sendsms.click), MarketHK (markethk.net)
• Education and community: LearnSys (learnsys.org), ITChurch (itchurch.online)
• Directories: E12 (e12.hk, e12.ca) and E12 Careers (jobs.e12.hk, jobs.e12.ca)

More at and