ZipRecruiter

Log In

2

Offensive Security Engineer Remote Jobs in Toronto, ON

Fullscript

Staff, Security Engineer

Toronto, ON · Remote

  • Medical

  • Retirement

  • PTO

The Opportunity We're looking for a Staff Security Engineer to join Fullscript's Security ... Remote-first flexibility to work where you work best, with North America (Ottawa, Toronto, or ...

Mercor

Security Engineer - AI Coding Agent

Toronto, ON · Remote

CA$85/hr

Remote Role Responsibilities * Use frontier AI coding agents to complete and evaluate complex security engineering tasks . * Review model-generated code and architectures for vulnerabilities and ...

YO AI Labs

Software Engineer - Remote

Toronto, ON · Remote

Software Engineer Job Type: Contract Location: Remote Job Summary: We are looking for experienced ... Identify tradeoffs around scalability, maintainability, performance, reliability, security, and ...

Veem

Principal Engineer (Remote)

Toronto, ON · Remote

Remote within Canada Build the Future of Global Payments Veem is transforming how businesses move ... Establish engineering standards for architecture, reliability, observability, security, testing ...

New

Autodesk

Senior Manager, Data Security

Toronto, ON · On-site +1

This leader will own the data security engineering pillar, with accountability for data ... This role is remote-friendly within North America. For those who prefer in-office or hybrid work ...

Rivalry

DevOps / SRE Engineer (Remote)

Toronto, ON · On-site +1

Security Design * Queueing * Automated testing * Continuous integration tools * Server ... However, we will consider remote applicants +/- 3 hours from eastern time zone. Why work here * We ...

Rivalry

DevOps / SRE Engineer (Remote)

Toronto, ON · On-site +1

Security Design * Queueing * Automated testing * Continuous integration tools * Server ... However, we will consider remote applicants +/- 3 hours from eastern time zone. Why work here * We ...

Indeed.com

Palpatine Test Job

Toronto, ON · Remote

  • Medical

  • Life

  • PTO

This is a great opportunity to anchor a growing team, work with top notch security and engineering ... US Remote - 164,000 - 237,000 USD per year * Austin, Metro Area 164,000 - 237,000 USD per year

Mercor

Security Review Expert - SOC 2

Toronto, ON · Remote

CA$90 - CA$110/hr

Remote Role Responsibilities * Review simulated vendor SOC 2 reports , security questionnaires, and pen-test evidence against a buyer's security standard. * Catch scope mismatches and lapsed bridge ...

Rivalry

Full-Stack Software Engineer (Remote)

Toronto, ON · Remote

  • Medical

  • PTO

We are on the hunt for a seasoned Full-Stack Software Engineer who is driven by the challenge of solving complex problems that span technology, regulatory, compliance, and security issues, all while ...

next page

Showing results 1-20

All JobsOffensive Security Engineer JobsOffensive Security Engineer Remote JobsOffensive Security Engineer Remote Jobs in Toronto, ON

Offensive Security Engineer Remote information

What is the difference between Offensive Security Engineer Remote vs Penetration Tester?

AspectOffensive Security Engineer RemotePenetration Tester
CertificationsOSCP, OSWE, CEHOSCP, CEH, GPEN
Work EnvironmentRemote, collaborative security teamsOften client-site or remote assessments
Industry UsageSecurity teams, cybersecurity firmsConsulting firms, security assessments
Search & Comparison IntentUnderstanding roles, skills, and remote opportunitiesJob scope, certifications, and remote work options

Offensive Security Engineer Remote and Penetration Tester roles share overlapping skills and certifications like OSCP and CEH. However, Offensive Security Engineers typically work within security teams on ongoing security infrastructure, often remotely, focusing on offensive security strategies. Penetration Testers usually perform specific security assessments, sometimes on-site, and may have a broader consulting focus. Both roles are vital in cybersecurity but differ in scope and work environment.

What are the key skills and qualifications needed to thrive as an offensive security engineer?

To thrive as an Offensive Security Engineer (Remote), you need strong expertise in penetration testing, vulnerability assessment, and cybersecurity principles, often supported by a degree in computer science or a related field. Familiarity with tools like Metasploit, Burp Suite, and Kali Linux, as well as certifications such as OSCP or CEH, is typically required. Attention to detail, problem-solving skills, and effective written communication are critical soft skills for success in this role. These abilities are essential for identifying vulnerabilities, reporting findings clearly, and helping organizations strengthen their security posture against evolving threats.

What are some common challenges faced by remote offensive security engineers, and how can they be addressed?

Remote Offensive Security Engineers often face challenges such as coordinating effectively with geographically dispersed teams, maintaining secure access to sensitive systems, and staying updated on rapidly evolving threat landscapes. Overcoming these hurdles typically involves strong communication skills, leveraging secure collaboration tools, and establishing regular check-ins with colleagues. Additionally, continuous learning through online resources and industry forums is vital to remain effective and proactive in identifying and addressing security vulnerabilities.

What does an offensive security engineer do?

An Offensive Security Engineer is responsible for proactively identifying and mitigating security vulnerabilities in an organization’s systems, networks, and applications. Working remotely, they perform penetration testing, vulnerability assessments, and simulated cyberattacks to discover weaknesses before malicious actors can exploit them. They also provide detailed reports and recommendations to help organizations improve their overall security posture. Remote Offensive Security Engineers use a variety of tools and collaborate with other security professionals to ensure effective communication and secure operations across distributed environments.

What are popular job titles related to Offensive Security Engineer Remote jobs in Toronto, ON?

For Offensive Security Engineer Remote jobs in Toronto, ON, the most frequently searched job titles are:

What job categories do people searching Offensive Security Engineer Remote jobs in Toronto, ON look for?

The top searched job categories for Offensive Security Engineer Remote jobs in Toronto, ON are:

Offensive Security Engineer Remote jobs near you
Infographic showing various Offensive Security Engineer Remote job openings in Toronto, ON as of August 2026, with employment types broken down into 78% Full Time, 20% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution.

Staff, Security Engineer

Fullscript

Toronto, ON • Remote

Full-time

Medical, Retirement, PTO

Re-posted 11 days ago

Job description

About Fullscript

We're an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care.

That simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.

We build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better.

This is your invitation.

Bring your ideas, your grit, and your care for people.
Join us and shape the future of care.
The Opportunity

We're looking for a Staff Security Engineer to join Fullscript's Security Engineering team as a senior technical leader and hands-on builder. This role is ideal for someone who started their career in software engineering and developed deep expertise in security engineering, application security, or product security.

You'll work closely with engineering teams to design and implement security solutions that scale across Fullscript's products and platforms. As a Staff-level engineer, you'll own complex technical initiatives, help shape security strategy, and influence how security is built into the software development lifecycle. You'll be expected to balance hands-on execution with technical leadership, mentoring engineers and helping teams solve security challenges in a way that supports both business objectives and engineering velocity.

We're looking for someone who has owned systems end-to-end; from application development and infrastructure decisions through security design and implementation; Understands how to build secure, scalable solutions in production environments. The ideal candidate is deeply technical, highly collaborative, and energized by solving difficult problems that span multiple teams, systems, and domains.

What you'll do
  • Lead the design and implementation of security solutions across Fullscript's applications, platforms, and AI-powered systems.
  • Partner with engineering teams to embed security throughout the software development lifecycle, including architecture reviews, threat modeling, secure coding practices, and design reviews.
  • Drive application security, product security, and vulnerability management initiatives from concept through implementation.
  • Own complex security challenges that span multiple teams, balancing technical requirements, business priorities, and engineering constraints to deliver scalable solutions.
  • Mentor engineers and security practitioners, raising the bar for secure software development and helping teams make sound security decisions.
  • Influence technical strategy and security standards through hands-on engineering, technical leadership, and cross-functional collaboration.
  • Stay ahead of emerging threats, security technologies, and AI-specific risks to help shape Fullscript's long-term security posture.
What you bring to the table
  • 8+ years of software engineering experience designing, building, and operating production systems.
  • 3+ years of recent experience in application security, product security, security engineering, or a related security discipline.
  • Deep understanding of secure software development, modern application architectures, APIs, and cloud-native environments.
  • Experience owning complex technical initiatives from problem definition through delivery, including working across multiple teams and stakeholders.
  • Proven ability to influence technical direction, mentor engineers, and drive adoption of security best practices.
  • Strong hands-on experience with security tooling, automation, vulnerability management, and security assessments.
  • Excellent communication skills, strong technical judgment, and a continuous learning mindset.
Bonus if you have
  • Experience securing Ruby on Rails, Node.js, JavaScript, GraphQL, or similar application ecosystems.
  • Experience with AWS cloud security and cloud-native security controls.
  • Experience with threat modeling methodologies such as STRIDE, PASTA, or similar frameworks.
  • Experience with vulnerability management, application security posture management, or developer security tooling.
  • Familiarity with GitHub, GitLab, Wiz, static analysis tools, secret scanning, or related security platforms.
  • Experience conducting penetration testing, security research, or ethical hacking activities.
  • Experience protecting healthcare, regulated, or sensitive customer data.
What we can offer you
  • Remote-first flexibility to work where you work best, with North America (Ottawa, Toronto, or Calgary) preferred for this role.
  • Flexible PTO and competitive pay, because work-life balance matters
  • RRSP/401k match and stock options to invest in your future
  • Premium benefits package with customizable coverage, paramedical services, and an HSA.
  • Fullscript discounts to save on high-quality wellness products
  • Continuous learning opportunities to grow your skills and career

Fullscript shares salary ranges to support transparency and help candidates make informed decisions. The range shown reflects base salary only and does not include stock options, wellness stipends, or other benefits that are part of Fullscript's total rewards package.

Final compensation depends on experience, skills, and location. We review pay regularly to stay aligned with market data and internal equity. Benefits and total rewards may vary by region.

Why Fullscript

Great work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.

What to Know Before You Apply

We're grateful for the interest in joining Fullscript. To make sure your application reaches our hiring team, please apply directly through our careers page.

A quick note: Due to the high volume of applications, we're not able to respond to phone or email inquiries about application status. If there's a match, our team will reach out directly.

Fullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request at [email protected].

All offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws.

We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S.

Learn More
www.fullscript.com
@fullscriptHQ on instagram
@fullscript on YouTube
FullScript on LinkedIn
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
apply for this job

Apply