PlutoSec is seeking an experienced Penetration Tester to support client security assessments on a remote, project-by-project basis. Candidates must have at least five years of professional cybersecurity experience, including hands-on penetration testing.

Responsibilities

- Conduct manual testing of web applications, APIs, networks, cloud environments, and mobile applications.
- Identify business-logic flaws, authentication weaknesses, authorization issues, and security misconfigurations.
- Validate vulnerabilities and produce clear, reproducible proof of concept.
- Prepare professional reports containing risk ratings and remediation guidance.
- Participate in client meetings, technical debriefings, and remediation retesting.
- Collaborate with senior penetration testers and other security professionals.
- Protect client information and follow all approved rules of engagement.

Requirements





- Minimum five years of professional cybersecurity experience.
- Strong hands-on experience in penetration testing and vulnerability assessments.
- Knowledge of OWASP Top 10, OWASP API Security Top 10, PTES, and MITRE ATT&CK.;
- Experience using Burp Suite, Nmap, Nessus, Metasploit, Postman, Nuclei, and Kali Linux.
- Ability to perform human-led manual testing without relying entirely on automated scanners.
- Strong technical report-writing and client communication skills.
- Certifications such as OSCP, PNPT, CRTO, CEH, CPTE, CISSP, or Security+ are preferred.
- Bug bounty, CTF, red-team, or responsible disclosure experience is considered an asset.

Pay: $80,203.23-$133,160.49 per year

Perks:

- On-site parking
- Tuition reimbursement

Work Location: Remote

📌 Penetration Tester – Cybersecurity (Canada)
🏢 Pluto IT Solutions
📍 Canada