Tekvaly is looking for a Penetration Tester / Ethical Hacker in Canada for its client.

Who We are

Tekvaly is a diversified global software development and IT consulting company that gives both offshore and onshore technical solutions to business enterprises. Our mission is to enable superior returns on clients’ technology investments through best-in-class industry solutions, domain expertise and global scale. We feel deeply connected to our customers, and therefore our success isn’t just a matter of our bottom line, but a reflection of how our customers flourish, and how their communities thrive. We strive to understand our customers’ individual needs so that we can develop products and services that enhance their livelihoods. Our customers are our partners, and when we rise, we rise together.

As a Penetration Tester / Ethical Hacker, you will plan and execute offensive security assessments against applications, APIs, networks, and cloud environments, helping teams find and fix vulnerabilities before attackers do.

Responsibilities

• Plan, scope, and execute penetration tests against web applications, APIs, mobile apps, networks, and/or cloud environments.
• Identify, validate, and exploit vulnerabilities in a controlled and responsible manner.
• Document findings in clear, actionable reports tailored for both technical and non-technical stakeholders.
• Collaborate with engineering and security teams to explain vulnerabilities and recommend remediation strategies.
• Contribute to the development of testing methodologies, tools, and scripts to improve assessment depth and efficiency.
• Conduct cyber threat research and stay current on emerging exploits, tools, and attack techniques.
• Participate in red-team exercises, social engineering assessments, or adversary simulations as needed.

Requirements

• Professional experience in penetration testing, ethical hacking, red teaming, or offensive security.
• Strong understanding of attack techniques, vulnerability classes, and exploitation strategies.
• Hands-on experience with common tools (e.g., Burp Suite, Nmap, Metasploit, Kali Linux, proxy tools, and scripting).
• Solid knowledge of web application security and the OWASP Top 10; API and cloud security testing experience is a strong plus.
• Ability to communicate complex technical issues clearly and concisely in reports and presentations.
• Programming/scripting experience (e.g., Python, Bash, PowerShell, or similar) for automation or custom exploits.
• Relevant certifications (e.g., OSCP, OSWE, CEH, GPEN, or similar) are considered an asset.
• Bachelor’s degree in Computer Science, Cybersecurity, or related field, or equivalent combination of experience and education.

Soft Skills We Like to See:

• Excellent Communication skills.
• Adaptability and willingness to learn.
• Problem-solving mindset.
• Analytical skills.
• Ability to work in a team environment and collaborate effectively with others.

********************************************************************************************************************************************************************************************

Accommodations will be provided on request for candidates taking part in all aspects of our recruitment and selection process.

We thank all candidates for their interest; however, only those selected for an interview will be contacted.

********************************************************************************************************************************************************************************************