About iGearsiGears Canada is the Edmonton office of iGears Technology Limited, a software company founded in Hong Kong in 2004. We develop and run 20 of our own SaaS products and have shipped 200+ apps for clients including listed companies, public-sector bodies, NGOs, universities and churches. Our Edmonton office opened in 2024, and we are now building a cybersecurity team in Canada to deliver penetration testing for clients and to secure our own platforms.Work arrangementsFull-time and part-time arrangements are welcome. On-site or hybrid arrangements are welcome.What you’ll doPlan and run penetration tests of web applications, APIs and mobile apps for clients in Canada and Hong Kong, following OWASP WSTG, ASVS and MASVSTest how applications connect to third-party services (OAuth, webhooks, payment and messaging APIs) and cloud environmentsVerify every finding by hand, rate risk with CVSS, and write transparent reports with fix guidance for developers and managementRetest fixes and issue verification lettersScope engagements with clients: rules of engagement, test accounts, testing windows and written authorisationTest and harden iGears’ own SaaS platforms, and coach our developers on secure codingWork with our Hong Kong team on joint engagements across time zonesWhat you’ll bringOSCP, or an equivalent hands‑on certification (e.G. CREST CRT or CCT, GIAC GPEN or GWAPT, eWPTX, PNPT)At least 2 years of hands‑on penetration testing,



with web application and API testing as core skillsStrong command of Burp Suite and common testing tools; scripting in Python, Bash or similarClear written English for client reportsLegal entitlement to work in CanadaNice to haveOSWE, OSEP, BSCP or CREST CCT APPMobile (iOS/Android), Active Directory or cloud (AWS, Azure, GCP) testingSource code reviewExperience testing applications in regulated sectors such as financial servicesCVEs, bug bounty findings or a CTF track recordWhat we offerCAD $80,000–110,000 a year, depending on experience and certificationsReal client engagements, plus 20 in-house SaaS products to test and secureA founding role in our Canadian security team, reporting to our CTOPaid vacation, health and dental cover where eligible, and support for relevant training and certification examsExplore our platforms before you applyAI: GenCMS (gen-cms.Com), AskCore (askcore.Org), HumanLevelUP (humanlevelup.Org), PromoPilot (promo-pilot.Org), Webetter (webetter.Co), PhotoCen (photocen.Com), Duckbot (duckbot.Hk, preview)Business operations: fileEC (fileec.Com), InsightBook (insightbook.Org), HRFlowTech (hrflowtech.Com), MemberSys (membersys.Org), AppointSys (appointsys.Org), Paperless.Cards (paperless.Ca rds)Messaging and marketing: SendPromotion.Email (sendpromotion.Email), SendSMS.Click (sendsms.Click), MarketHK (markethk.Net)Education and community: LearnSys (learnsys.Org), ITChurch (itchurch.Online)Directories: E12 (e12.Hk, e12.Ca) and E12 Careers (jobs.E12.Hk, jobs.E12.Ca)More at https://www.Igears.Ca and https://www.Igears.Com.Hk/platforms/#J-18808-Ljbffr

📌 Penetration Test Lead – Canada (Hybrid) - $140,000 - $160,000 A Year (Winnipeg)
🏢 E12
📍 Winnipeg