Senior Ethical Hacker

Toronto, ON Full-time CA$105,400 - CA$164,600 / year

Stantec is hiring a Senior Ethical Hacker to assess web applications and cloud services, emulate real-world attacks, and identify vulnerabilities and security risks.

Responsibilities

• Conduct penetration tests on cloud systems, applications, APIs, and infrastructure, including Kubernetes, containers, databases, and serverless services.
• Assess configurations, access controls, and encryption; validate and exploit security findings.
• Develop automated security evaluation workflows, policy-as-code controls, and custom security tooling and infrastructure extensions.
• Participate in internal red-team and purple-team engagements and support security training.
• Document and present findings, agree on rules of engagement, and help engineering teams meet remediation goals.

Qualifications

• At least 5 years of relevant cybersecurity experience; offensive security or red-team experience is preferred.
• Strong manual web and cloud penetration-testing skills, with experience writing custom tools and building attack automation.
• Experience with cloud services, scripting, containers, and communicating findings to technical teams and senior stakeholders.
• A related degree or certificate is preferred. Relevant certifications and AI/LLM penetration-testing experience are also preferred.

Compensation and details

Annual pay ranges from $105,400 to $158,100 for locations outside the Lower Mainland in BC and various Ontario locations, and from $114,600 to $164,600 for the Lower Mainland, GTA, and Ottawa. The role is full-time, with primary location listed as Toronto, Ontario, and Vancouver, British Columbia, also listed as a location.