Ottawa, ON Remote (Country) 5 - 12%

Software Secured is hiring a Penetration Tester

Requirements

2+ years of hands-on manual penetration testing — not scanner-assisted, manual
Demonstrated ability to run standard engagements end-to-end with minimal oversight: scope, test, report, readout, retest
Finds that go beyond OWASP Top 10 basics — business logic issues, complex auth flaws, chained vulnerabilities
Reports that are client-ready with low rework: technically accurate, clearly written, correctly risk-rated
Software development background in one or more of Python, .NET, Ruby, or Java — you understand how the thing was built, not just how to break it
Strong communication skills in both directions: writing that doesn't require a translator and calls where you can hold your own in front of an engineering team
Located in Canada and eligible to work (citizen, permanent resident, or valid work visa)

Nice to Have

OSCP, OSCP+, or GWAPT
Experience across multiple service areas (web + mobile, or web + network)
Familiarity with compliance frameworks that drive our clients' security programs: SOC 2, ISO 27001, PCI DSS, HIPAA

Required Skills

compliance frameworks that drive our cli compliance frameworks that drive our cli

Landing international contracts?

Invoice globally with an EU company

GloPay creates an Estonian partnership for you automatically. Your clients get proper invoices, you keep 95% of payments. Setup takes 5 minutes, works in 100+ currencies.

EU-registered company for compliance

Multi-currency invoicing & payments

Expense tracking & tax reports

Money in your bank in 1 business day

Start invoicing free

5% per invoice • No subscriptions

About company

Software Secured delivers manual, exploit-driven penetration testing with built-in retesting and audit-ready evidence, helping tech teams reduce risk, accelerate compliance, and close enterprise deals faster.

They specialize in human-led security testing across web, API, mobile, infrastructure, cloud, AI, IoT, and hardware systems, uncovering real threats that automated scanners miss. Their services include red teaming, social engineering, threat modeling, and secure code training, tailored for startups to enterprises.

The company provides a purpose-built Portal for real-time visibility, seamless integration with tools like Jira and Slack, and continuous compliance reporting. With full-time certified Canadian pentesters, they offer actionable remediation support and 0 false-positive reports to strengthen security posture globally.

All jobs at Software Secured Visit website

Job Details

Category other

Posted 3 hours ago