About iGears iGears Canada is the Edmonton office of iGears Technology Limited, a software company founded in Hong Kong in 2004. We develop and run 20 of our own SaaS products and have shipped 200+ apps for clients including listed companies, public-sector bodies, NGOs, universities and churches. Our Edmonton office opened in 2024, and we are now building a cybersecurity team in Canada to deliver penetration testing for clients and to secure our own platforms.
Work arrangements Full time and part-time arrangements are welcome. On-site or hybrid arrangements are welcome.
What you’ll do Plan and run penetration tests of web applications, APIs and mobile apps for clients in Canada and Hong Kong, following OWASP WSTG, ASVS and MASVS
Test how applications connect to third-party services (OAuth, webhooks, payment and messaging APIs) and cloud environments
Verify every finding by hand, rate risk with CVSS, and write clear reports with fix guidance for developers and management
Retest fixes and issue verification letters
Scope engagements with clients: rules of engagement, test accounts, testing windows and written authorisation
Test and harden iGears’ own SaaS platforms, and coach our developers on secure coding
Work with our Hong Kong team on joint engagements across time zones
What you’ll bring OSCP, or an equivalent hands‑on certification (e.g. CREST CRT or CCT, GIAC GPEN or GWAPT, eWPTX, PNPT)
At least 2 years of hands‑on penetration testing, with web application and API testing as core skills




Strong command of Burp Suite and common testing tools; scripting in Python, Bash or similar
Clear written English for client reports
Legal entitlement to work in Canada
Nice to have OSWE, OSEP, BSCP or CREST CCT APP
Mobile (iOS/Android), Active Directory or cloud (AWS, Azure, GCP) testing
Source code review
Experience testing applications in regulated sectors such as financial services
CVEs, bug bounty findings or a CTF track record
What we offer CAD $80,000–110,000 a year, depending on experience and certifications
Real client engagements, plus 20 in-house SaaS products to test and secure
A founding role in our Canadian security team, reporting to our CTO
Paid vacation, health and dental cover where eligible, and support for relevant training and certification exams
Explore our platforms before you apply AI: GenCMS (gen-cms.com), AskCore (askcore.org), HumanLevelUP (humanlevelup.org), PromoPilot (promo-pilot.org), Webetter (webetter.co), PhotoCen (photocen.com), Duckbot (duckbot.hk, preview)
Business operations: fileEC (fileec.com), InsightBook (insightbook.org), HRFlowTech (hrflowtech.com), MemberSys (membersys.org), AppointSys (appointsys.org), Paperless.Cards (paperless.ca rds)
Messaging and marketing: SendPromotion.Email (sendpromotion.email), SendSMS.click (sendsms.click), MarketHK (markethk.net)
Education and community: LearnSys (learnsys.org), ITChurch (itchurch.online)
Directories: E12 (e12.hk, e12.ca) and E12 Careers (jobs.e12.hk, jobs.e12.ca)
More at https://www.igears.ca and https://www.igears.com.hk/platforms/

#J-18808-Ljbffr

📌 Security Consultant – Penetration Testing (Alberta)
🏢 E12
📍 Alberta