About iGears

iGears Canada is the Edmonton office of iGears Technology Limited, a software company founded in Hong Kong in 2004. We develop and run 20 of our own SaaS products and have shipped 200+ apps for clients including listed companies, public-sector bodies, NGOs, universities and churches. Our Edmonton office opened in 2024, and we are now building a cybersecurity team in Canada to deliver penetration testing for clients and to secure our own platforms.

Work arrangements

Full-time and part-time arrangements are welcome. On-site or hybrid arrangements are welcome.

What you’ll do

- Plan and run penetration tests of web applications, APIs and mobile apps for clients in Canada and Hong Kong, following OWASP WSTG, ASVS and MASVS
- Test how applications connect to third-party services (OAuth, webhooks, payment and messaging APIs) and cloud environments
- Verify every finding by hand, rate risk with CVSS, and write clear reports with fix guidance for developers and management
- Retest fixes and issue verification letters
- Scope engagements with clients: rules of engagement, test accounts, testing windows and written authorisation
- Test and harden iGears’ own SaaS platforms, and coach our developers on secure coding
- Work with our Hong Kong team on joint engagements across time zones

What you’ll bring

- OSCP, or an equivalent hands‑on certification (e.g. CREST CRT or CCT, GIAC GPEN or GWAPT, eWPTX, PNPT)
- At least 2 years of hands‑on penetration testing, with web application and API testing as core skills




- Solid command of Burp Suite and common testing tools; scripting in Python, Bash or similar
- Clear written English for client reports
- Legal entitlement to work in Canada

Nice to have

- OSWE, OSEP, BSCP or CREST CCT APP
- Mobile (iOS/Android), Active Directory or cloud (AWS, Azure, GCP) testing
- Source code review
- Experience testing applications in regulated sectors such as financial services
- CVEs, bug bounty findings or a CTF track record

What we offer

- CAD $80,000–110,000 a year, depending on experience and certifications
- Real client engagements, plus 20 in-house SaaS products to test and secure
- A founding role in our Canadian security team, reporting to our CTO
- Paid vacation, health and dental cover where eligible, and support for relevant training and certification exams

Explore our platforms before you apply

- AI: GenCMS (gen-cms.com), AskCore (askcore.org), HumanLevelUP (humanlevelup.org), PromoPilot (promo-pilot.org), Webetter (webetter.co), PhotoCen (photocen.com), Duckbot (duckbot.hk, preview)
- Business operations: fileEC (fileec.com), InsightBook (insightbook.org), HRFlowTech (hrflowtech.com), MemberSys (membersys.org), AppointSys (appointsys.org), Paperless.Cards (paperless.ca rds)
- Messaging and marketing: SendPromotion.Email (sendpromotion.email), SendSMS.click (sendsms.click), MarketHK (markethk.net)
- Education and community: LearnSys (learnsys.org), ITChurch (itchurch.online)
- Directories: E12 (e12.hk, e12.ca) and E12 Careers (jobs.e12.hk, jobs.e12.ca)

More at https://www.igears.ca and https://www.igears.com.hk/platforms/

📌 Security Consultant – Penetration Testing (Edmonton)
🏢 E12
📍 Edmonton