Senior Security Engineer (Offensive Security)

Welcome back!Don't have an account? Sign upContinue with GoogleContinue with LinkedInorEmailPasswordForgot password?LOG INSend a MessageTypeTitleDescriptionCancelSendFOR EMPLOYERSLOG INSIGN UPView all jobsSenior Security Engineer (Offensive Security)LocationToronto, CanadaWork modeHybridExperience3+ yearsPosted2 months agoSkills & LanguagesMust-haverequiredPython3 Year(s)Owasp3 Year(s)Pentest3 Year(s)Aws3 Year(s)Nice-to-haveReact.jsDjangoLanguages requiredEnglishWhy this role? "We're a lean team that moves quickly and takes ownership seriously. If you've ever felt frustrated by layers of approval slowing down good ideas, you'll appreciate how we operate. We build products that become mission-critical in real-world moments: the kiosk welcoming thousands of attendees, the operations dashboard event teams rely on behind the scenes, and the badge that prints instantly when someone arrives. Success often goes unnoticed because everything simply works. Failure is immediately visible. That level of responsibility creates meaningful engineering challenges and opportunities to make a direct impact. We're looking for someone who wants to solve important problems, influence how security is approached across the organization, and help build products people genuinely enjoy using." About the Company The company powers live events across the globe, from small professional gatherings and academic conferences to large-scale trade shows and expos. Its platform helps organizers manage registration, attendee engagement, check-in experiences, badge printing, mobile applications, and event operations through a connected ecosystem of tools. Customers rely on the platform when reliability matters most, which drives a strong commitment to quality, performance, and security. What You'll Do Approach security from an adversarial perspective, continuously evaluating the company's applications, infrastructure, and processes to identify weaknesses before external actors do. Design and conduct internal red team exercises that simulate realistic attack scenarios, then work closely with stakeholders to ensure findings are remediated effectively. Perform end-to-end penetration testing engagements, documenting attack paths, business impact, and actionable recommendations. Strengthen software supply chain security by improving dependency management, CI/CD protections, credential handling, and development workflows. Establish and maintain security controls for developer endpoints, including device hardening, access management, secret storage, and secure tooling standards. Lead security investigations and incident response efforts, from initial triage through root cause analysis and long-term remediation. Develop proactive threat-hunting initiatives and maintain playbooks that improve organizational readiness. Help cultivate a security-first culture through phishing simulations, security awareness initiatives, and practical guidance for engineering teams. Collaborate with Engineering, SRE, and leadership teams to incorporate security considerations into architecture, product decisions, and technical roadmaps. Stay current on emerging threats, vulnerability disclosures, attack techniques, and industry best practices, bringing relevant insights back into the organization. What We're Looking For 3+ years of experience in offensive security, penetration testing, red teaming, or a related security discipline. Deep understanding of web application and API security, including common vulnerabilities, authentication and authorization weaknesses, and exploitation techniques. Familiarity with modern supply chain threats such as dependency confusion, package compromise, typosquatting, and malicious development tooling. Working knowledge of cloud-native environments and modern application stacks, particularly AWS-based systems and web technologies. Ability to review application code, understand deployment architectures, and identify security risks...