Packetlabs was built by an ethical hacker after seeing vulnerability assessments presented as penetration tests. Our sloga n "Identify Risks Before They Become Headlines" drives at the importance of not providing our clients with a false sense of security.

We provide expert-level penetration testing services that are thorough and tailored to help foster a safe digital space where everyone has the right to privacy and security. The Ethical Hacker – Infrastructure & Red Team is responsible for planning, executing, and reporting on infrastructure penetration testing, cloud security assessments, Active Directory security assessments, and adversary simulation engagements. The role evaluates the effectiveness of client security controls by identifying, validating, and demonstrating exploitable security vulnerabilities across enterprise infrastructure using industry-recognized offensive security methodologies.

Working independently and collaboratively with other security consultants, the Ethical Hacker performs offensive security assessments across on-premises, hybrid, and cloud environments while contributing to red team operations, purple team exercises, and advanced security testing engagements. The role provides technical guidance to clients through detailed reporting and presentations while contributing to the continuous improvement of Packetlabs' offensive security methodologies, tooling, and service offerings.

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; Minimum of 3 years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.

Demonstrated experience conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking.

Experience performing internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing.

Experience assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform.

Strong understanding of enterprise networking, authentication technologies, identity management, cloud security, and offensive security methodologies.

Excellent technical writing, presentation, and communication skills,



with the ability to communicate findings to both technical and executive stakeholders.

Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are considered an asset. OSCP or equivalent demonstrated technical capability is strongly preferred.

Experience participating in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered an asset.

Customer-first mentality. You are a excellent communicator with clients, project managers, and teammates. Cybersecurity is changing every day, and you need to keep up or want to keep up. Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments.

Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools.

Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure.

Evaluate cloud environments including AWS, Microsoft Azure, and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.

Assess containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies where applicable.

Execute offensive security operations across the attack lifecycle, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.

Support purple team engagements by working collaboratively with defensive teams to validate detections, improve monitoring capabilities, and strengthen defensive controls.

Prepare comprehensive technical reports that clearly communicate vulnerabilities, attack paths, business impact, risk ratings,



and remediation recommendations.

Present assessment findings to technical teams, executive stakeholders, and client leadership.

Provide technical guidance on remediation strategies, security architecture, and defensive improvements.

Manage assigned engagements while ensuring delivery quality, timelines, and client expectations are achieved.

Technical Leadership & Continuous Improvement

Maintain expertise in offensive security methodologies, infrastructure security, cloud technologies, Active Directory security, and emerging attack techniques.

Contribute to the development and continuous improvement of testing methodologies, internal tooling, technical documentation, and service offerings.

Participate in technical research, automation initiatives, internal training, and knowledge-sharing activities.

Collaborate with consulting teams to strengthen technical quality, consistency, and service delivery across the Offensive Security practice.

Performance in this role is evaluated using a combination of technical, operational, and client-foc used measures, including but not limited to:

Successful delivery of infrastructure penetration testing and adversary simulation engagements within established quality, budget, and timeline expectations.

Accuracy, completeness, and technical quality of client reports and deliverables.

Positive client feedback regarding technical expertise, communication, and professionalism.

Contribution to technical research, methodology development, automation, and knowledge-sharing initiatives.

Effective collaboration with Delivery Managers, Project Managers, and consulting team members.

Ongoing professional development through certifications, research, and technical skill advancement.

Receive immediate and ongoing offensive security training, mentorship, and professional development to advance your technical capabilities

A leadership team that values substance, quality, and disciplined execution

Collaboration with a highly skilled team of security professionals who are passionate about technical excellence and raising the bar

GRRSP with corporate matching in Canada

Participation in corporate benefit plans within Canada

Flexible work environment that empowers employees to do their best work

Fully remote within Canada

90,000 - 120,000 CAD per year (Remote (Canada))

#

📌 Penetration Tester - Remote (Canada)
🏢 Packetlabs
📍 Canada