Penetration Tester

RBC

. Perform penetration testing against web, API, mobile, and AI application landscapes .

Posted 9/24/2026full-timeToronto • CanadaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application-layer penetration testing, with a strong understanding of web, mobile, and AI application architecture. Proficient in communicating security insights and best practices to diverse stakeholders while staying current on emerging security threats and tools.

Highest-signal resume keywords

Application-Layer Penetration TestingOWASP KnowledgeModern Penetration Testing ToolsSoftware Development ExperienceRegulated Environment Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingWeb Application SecurityMobile Application SecurityAI Application SecuritySecurity FrameworksApplication ArchitectureNetwork Systems TestingCloud Services TestingScript Development

Soft Skills

Written CommunicationVerbal CommunicationCuriosity

Tools & Technologies

AWSAzure

Certifications & Qualifications

OSCPOSCEGWAPTGMOBGXPN

Industry Keywords

Security Best PracticesEmerging Security ThreatsStakeholder EngagementApplication Security

Tech Stack

Tools & technologies

AWSAzureCloud

About the role

Key responsibilities & impact

Perform penetration testing against web, API, mobile, and AI application landscapes
Ensure applications and infrastructure are methodically and thoroughly tested using industry best practices before production promotion
Prepare and deliver clear, concise, and impactful reports to stakeholders
Educate developers, security consultants, executives, and other stakeholders on application security matters and organizational impacts
Research and stay current on emerging security threats, techniques, tools, and trends
Provide application penetration testing services for global RBC business and application development teams across enterprise IT groups
Act as the subject matter expert in penetration testing execution
Participate in developing application security best practices, tools, processes, and landscapes
Provide technical input on current, interim, and target-state penetration testing and security processes
Communicate development-team needs to strategic security leadership

Requirements

What you’ll need

4+ years of experience executing application-layer penetration testing exercises
Strong understanding of web, mobile, and AI application architecture and development principles
Strong knowledge of OWASP, SANS, or other security-related frameworks
Current experience with modern application-layer penetration testing tooling and platforms
Hands-on experience in software and/or script development
Exemplary written and verbal communication skills
Curious mindset
OSCP, OSCE, GWAPT, GMOB, or GXPN certifications are an asset
Experience testing network systems and cloud services such as AWS and Azure is nice to have
Experience providing penetration testing services in a highly regulated environment is nice to have

Benefits

Comp & perks

Bonuses
Flexible benefits
Competitive compensation
Commissions
Stock where applicable
Coaching and managing opportunities for development
Ability to make a difference and lasting impact
Dynamic, collaborative, progressive, and high-performing team
World-class training program in financial services
Flexible work/life balance options
Challenging work opportunities
Opportunities to take on progressively greater accountabilities
Opportunities to build close relationships with clients
Access to a variety of job opportunities across business and geographies