Penetration Tester

Packetlabs

. Perform penetration testing of web applications, mobile applications, thick clients, and APIs .

Posted 11/9/2026full-timeRemote • CanadaJuniorMid-Level💰 CA$90,000 - CA$120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing, source code reviews, and application security, with a strong focus on OWASP standards and the ability to communicate findings effectively to both technical and executive audiences.

Highest-signal resume keywords

Penetration TestingApplication Security TestingBurp Suite ExpertiseOWASP KnowledgeOSCP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CC#PythonObjective-CJavaJavaScriptSQLAngularJSSASTDAST

Soft Skills

Strong CommunicationCustomer-First MentalityResponsivenessDependabilityWillingness to Learn

Tools & Technologies

Burp SuiteAttack ProxyWeb ServicesXMLJSONSOAPRESTAJAX

Certifications & Qualifications

OSCPOSWEBSCP

Industry Keywords

Penetration TestingApplication FlawsActive DirectoryInformation SecurityMobile ApplicationsWeb ApplicationsCloud Infrastructure

Tech Stack

Tools & technologies

AngularCloudJavaJavaScriptObjective-CPythonSOAPSQL

About the role

Key responsibilities & impact

Perform penetration testing of web applications, mobile applications, thick clients, and APIs
Conduct source code reviews and whitebox penetration testing to prove the impact of application flaws
Reverse engineer mobile and thick client applications
Chain application flaws into cloud and on-premises Active Directory infrastructure where applicable
Develop detailed reports on findings and remediations for impactful findings
Debrief findings at technical and executive levels
Perform SAST and DAST on enterprise, SaaS, and custom in-house applications
Use scanners and validate and eliminate false positives
Continuously go beyond standard OWASP testing practices
Limited opportunities for lateral movement into infrastructure teams, at manager discretion

Requirements

What you’ll need

Experienced developer/application security tester
Solid working knowledge of C, C#, Python, Objective-C, Java, JavaScript, SQL, and AngularJS
Familiarity with XML, JSON, SOAP, REST, AJAX, and web services
Understanding of AI/LLM weaknesses and application flaws
Extensive experience using an attack proxy such as Burp Suite
3–5 years of penetration testing and consulting experience preferred
Graduate of a post-secondary college or university degree program
At least two years of experience dealing with information security-related tasks
Professional qualification(s), including OSCP, OSWE, or BSCP
OSCP or Burp is mandatory for the organization
Strong understanding of OWASP for Web, API, Mobile, and AI/LLM
Customer-first mentality, strong communication, responsiveness, dependability, humility, and willingness to continuously learn

Benefits

Comp & perks

Immediate and ongoing offensive security training, mentorship, and professional development
Opportunity to work on high-stakes hardware engagements
Opportunity to shape the growth, direction, and methodology of Packetlabs' expanding hardware practice
Leadership team valuing substance, quality, and disciplined execution
Collaboration with a highly skilled team of security professionals
Competitive compensation and growth opportunity
GRRSP with corporate matching in Canada
Participation in corporate benefit plans within Canada
Flexible work environment
Fully remote within Canada