Senior Application Security Engineer (Offensive Security)

This is a hybrid position (2 – 3x a week in the office) in Downtown Toronto. Are you excited by the opportunity to grow an Offensive Security team? This role is ideal for a seasoned cybersecurity professional with a passion for offensive security, application testing, and threat management—especially in modern environments involving low code/no code platforms and AI/ML pipelines. You will play a pivotal role in proactively identifying vulnerabilities, simulating adversarial threats, and strengthening this company’s security posture across cloud, application, and AI/ML domains. If you have experience building offensive security teams, leading penetration testing, managing incident response, and securing AI/ML workflows, this role is for you! What you will do and how you will make an impact … · Conduct penetration testing on low code/no code platforms, identifying misconfigurations and privilege escalation risks. · Design and execute penetration tests targeting AI/ML pipelines, models, and data flows. · Assess CI/CD integrations and MLOps environments for security gaps. · Evaluate web and mobile applications for vulnerabilities such as insecure APIs and injection flaws. · Perform threat modeling and code analysis to identify and remediate vulnerabilities. · Monitor and respond to threats using SIEM tools (e.g., Splunk, Azure Sentinel). · Develop use cases tailored to emerging threats, including AI/ML-specific attack vectors. · Use tools like Burp Suite, OWASP ZAP, Checkmarx, Veracode, and Snyk for vulnerability assessments. · Conduct offensive API testing and simulate real-world attack scenarios.

<ul><li>10+ years of hands-on experience in offensive cybersecurity (pen testing, red teaming, adversary simulation).</li></ul> <ul><li>Deep understanding of cloud security (AWS, Azure) and modern security frameworks (NIST, ISO 27001, MITRE ATT& CK).</li></ul> <ul><li>Strong background in application security, incident response, and threat management.</li></ul> <ul><li>Experience with low code/no code platforms and AI/ML pipeline testing is highly preferred.</li></ul> <ul><li>Offensive security certifications such as OSCP / OSCE / OSEP / GPEN / GWAPT are a plus</li></ul>

Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles. Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. <a href="https://www.roberthalf.com/ca/en/mobile-app" target="_blank">Download the Robert Half app</a> and get 1-tap apply, notifications of AI-matched jobs, and much more. Questions? Call your local office at 1.888.490.4429. All applicants applying for Canadian job openings must be authorized to work in Canada. Only job postings for jobs located in Quebec appear in French. © 2025 Robert Half. By clicking “Apply Now,” you’re agreeing to <a href="https://www.roberthalf.com/ca/en/terms">Robert Half’s Terms of Use</a>.

Toronto, ON
onsite
Permanent
120000.00 - 140000.00 CAD / Yearly
This is a hybrid position (2 – 3x a week in the office) in Downtown Toronto. Are you excited by the opportunity to grow an Offensive Security team? This role is ideal for a seasoned cybersecurity professional with a passion for offensive security, application testing, and threat management—especially in modern environments involving low code/no code platforms and AI/ML pipelines. You will play a pivotal role in proactively identifying vulnerabilities, simulating adversarial threats, and strengthening this company’s security posture across cloud, application, and AI/ML domains. If you have experience building offensive security teams, leading penetration testing, managing incident response, and securing AI/ML workflows, this role is for you! What you will do and how you will make an impact … · Conduct penetration testing on low code/no code platforms, identifying misconfigurations and privilege escalation risks. · Design and execute penetration tests targeting AI/ML pipelines, models, and data flows. · Assess CI/CD integrations and MLOps environments for security gaps. · Evaluate web and mobile applications for vulnerabilities such as insecure APIs and injection flaws. · Perform threat modeling and code analysis to identify and remediate vulnerabilities. · Monitor and respond to threats using SIEM tools (e.g., Splunk, Azure Sentinel). · Develop use cases tailored to emerging threats, including AI/ML-specific attack vectors. · Use tools like Burp Suite, OWASP ZAP, Checkmarx, Veracode, and Snyk for vulnerability assessments. · Conduct offensive API testing and simulate real-world attack scenarios.
2025-09-23T14:48:46Z

Senior Application Security Engineer (offensive Security) Job in Toronto | Robert Half