Penetration Tester

Malleum

Penetration Tester position at Malleum focusing on cybersecurity vulnerabilities and threat simulations. Engaging with government and enterprise clients to strengthen national and allied security frameworks.

Posted 5/11/2026full-timeRemote • 🇨🇦 CanadaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDockerGoogle Cloud PlatformKubernetesLinuxPythonRuby

About the role

Key responsibilities & impact

Conduct web, network, mobile, and API penetration tests to identify vulnerabilities.
Support team assessments, simulating real-world attack scenarios.
Develop and execute custom exploits, scripts, and attack chains.
Conduct source code reviews for security weaknesses in applications.
Assess cloud security in AWS, Azure, and GCP, as well as containerized environments like Docker and Kubernetes.
Collaborate with blue teams, SOC analysts, and developers to remediate findings.
Write detailed technical reports and present findings to technical and non-technical stakeholders.
Stay updated on zero-day vulnerabilities, APT tactics, and emerging threats.
Participate in CTFs, security research, and bug bounty programs to refine skills.

Requirements

What you’ll need

3-5 years of hands-on penetration testing experience.
Proficiency in manual testing techniques beyond automated scanning.
Strong knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
Experience with Active Directory attacks, privilege escalation, and lateral movement.
Skilled in the use of some or all of: Burp Suite, Nessus, Metasploit, Kali Linux.
Familiarity with scripting in Python, PowerShell, Bash, or Ruby.
Understanding of secure coding practices and DevSecOps principles.
Excellent communication and interpersonal skills.

Benefits

Comp & perks

Competitive compensation, performance incentives, and comprehensive benefits
Continuous learning budget, certification sponsorship, and clear paths to senior leadership

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

penetration testingmanual testing techniquessource code reviewcloud securityscriptingsecure coding practicesDevSecOps principlesActive Directory attacksprivilege escalationlateral movement

Soft Skills

communication skillsinterpersonal skills