[Hiring] Penetration Tester @Malleum
Feb 23, 2025 - Malleum is hiring a remote Penetration Tester. 💸 Salary: unspecified. 📍Location: Canada.
Role Description
Working remotely, in this position your mandate will be to assess the security posture of our clients by identifying and exploiting vulnerabilities in networks, applications, and systems. You will conduct controlled security assessments, execute attack simulations, and analyze security weaknesses. You’ll document findings and collaborate with colleagues and client teams to support remediation efforts. You will also contribute to analysis and reporting that provides actionable insights for improving defenses.
This is an outstanding opportunity to join an accelerating startup, work with cutting-edge tech, and tackle critical problems on high-stakes engagements.
Key Responsibilities
- Conduct web, network, mobile, and API penetration tests to identify vulnerabilities.
- Support team assessments, simulating real-world attack scenarios.
- Develop and execute custom exploits, scripts, and attack chains.
- Conduct source code reviews for security weaknesses in applications.
- Assess cloud security in AWS, Azure, and GCP, as well as containerized environments like Docker and Kubernetes.
- Collaborate with blue teams, SOC analysts, and developers to remediate findings.
- Write detailed technical reports and present findings to technical and non-technical stakeholders.
- Stay updated on zero-day vulnerabilities, APT tactics, and emerging threats.
- Participate in CTFs, security research, and bug bounty programs to refine skills.
Qualifications
- 3-5 years of hands-on penetration testing experience.
- Proficiency in manual testing techniques beyond automated scanning.
- Strong knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
- Experience with Active Directory attacks, privilege escalation, and lateral movement.
- Skilled in the use of some or all of: Burp Suite, Nessus, Metasploit, Kali Linux.
- Familiarity with scripting in Python, PowerShell, Bash, or Ruby.
- Understanding of secure coding practices and DevSecOps principles.
- Excellent communication and interpersonal skills.
Nice-to-Haves
- Experience in cloud security testing.
- Knowledge of hardware hacking, IoT security, or reverse engineering.
- Familiarity with SOC operations, threat hunting, and incident response.
- Previous experience in bug bounty programs or published security research.
Requirements
- Experienced
Similar Remote Jobs
More jobs at Malleum
-
Sales / Business competitive base salary with performance-based incentive CanadaMar 14, 2025
-
All others unspecified CanadaMar 14, 2025
More All Others jobs
-
All others $22.00 - $23.50 hourly USAApr 04, 2025
More jobs in Canada
-
Software Development unspecified Northern America, UK, Canada +5 moreApr 04, 2025
-
Customer Service unspecified CanadaApr 04, 2025
Kickstart Your Job Search
Unlock 54,769 additional remote jobs, advanced search & email notifications
Too many emails? Declutter your inbox with Meco
Your home for reading newsletters
| 📍 | Be aware of the location restriction for this remote position: Canada |
| ‼ | Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more. |
|
Salary
💸
unspecified
|
Remote
Location
Canada
|
|
Job Type
full-time
|
Posted
Feb 23, 2025
|
| 📍 | Be aware of the location restriction for this remote position: Canada |
| ‼ | Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more. |
