ZipRecruiter

Log In

1

Web Penetration Testing Jobs in Ontario (NOW HIRING)

Software Secured

Penetration Tester

Ottawa, ON · On-site +1

Run manual penetration tests across web applications, APIs, mobile apps, and network infrastructure - from scoping through testing, reporting, client readout, and retest * Produce findings that are ...

ISA Cybersecurity

Penetration Tester

Toronto, ON · On-site

... testing. About Us: We are proud to be recognized as a top employer for multiple years in a row, we ... Conduct penetration tests on web applications, networks, systems, and cloud environments * Perform ...

ISA Cybersecurity

Penetration Tester

Toronto, ON · On-site

... testing. About Us: We are proud to be recognized as a top employer for multiple years in a row, we ... Conduct penetration tests on web applications, networks, systems, and cloud environments * Perform ...

Spgi

Lead Penetration Test Engineer

Toronto, ON · Hybrid

CA$135K/yr

Penetration Testing & Vulnerability Assessments Conduct comprehensive penetration testing of web applications, infrastructure, and cloud environments using both manual and automated techniques.

S&P Global

Lead Penetration Test Engineer

Toronto, ON · Hybrid

CA$135K/yr

Penetration Testing & Vulnerability Assessments Conduct comprehensive penetration testing of web applications, infrastructure, and cloud environments using both manual and automated techniques.

RSM

Offensive Security - Penetration Tester

Toronto, ON

CA$62K - CA$107K/yr

Conduct manual penetration testing on web applications, network devices, and other systems * Collaborate with our clients in a fast-paced environment across many technology stacks and services ...

Infotek Consulting Inc.

.NET Developer - Wealth

Toronto, ON · Hybrid

CA$80 - CA$96/hr

... penetration testing, vulnerability scans, and security assessments. • Design, develop, enhance, and maintain applications using .NET Framework, .NET Core/.NET, ASP.NET Web Forms, ASP.NET Web API ...

Varicent

Director, Offensive Security

Toronto, ON · On-site

CA$138K - CA$181K/yr

Oversee web, API, mobile, cloud, and AI-enabled security testing. * Lead red team operations, adversary simulations, and purple team exercises. * Manage external penetration testing engagements and ...

next page

Showing results 1-20

All JobsWeb Penetration Testing JobsWeb Penetration Testing Jobs in Ontario

Web Penetration Testing information

What is web penetration testing?

Web penetration testing is a security assessment process where ethical hackers simulate cyberattacks on a website or web application to identify vulnerabilities and weaknesses. The goal is to find and fix security flaws before malicious hackers can exploit them. This process involves testing for issues such as SQL injection, cross-site scripting (XSS), authentication problems, and insecure configurations. The results help organizations strengthen their web security and protect sensitive data from breaches.

What are the key skills and qualifications needed to thrive as a web penetration tester?

To excel as a Web Penetration Tester, you need a solid understanding of web application security, networking protocols, and common vulnerabilities, often supported by a degree in computer science or a related field. Familiarity with tools like Burp Suite, OWASP ZAP, Metasploit, and relevant certifications such as OSCP or CEH is typically required. Strong analytical thinking, attention to detail, and effective communication skills help testers identify risks and clearly report findings to technical and non-technical stakeholders. These competencies are crucial for uncovering security flaws, ensuring robust defenses, and helping organizations mitigate potential cyber threats.

What are some common challenges faced by web penetration testers during assessments, and how can they be addressed?

Web penetration testers often encounter challenges such as limited access to required testing environments, incomplete or outdated documentation, and rapidly evolving web technologies that demand continuous learning. Additionally, testers must balance thoroughness with time constraints and ensure clear communication with development and security teams. Addressing these challenges involves proactive coordination with stakeholders, staying updated with industry tools and vulnerabilities, and maintaining detailed, well-structured reporting to facilitate remediation and collaboration.

What is the difference between Web Penetration Testing vs Web Security Analyst?

AspectWeb Penetration TestingWeb Security Analyst
CertificationsOSCP, CEH, GPENCISSP, CISA, GIAC
Work EnvironmentHands-on testing, simulated attacksMonitoring, policy development, incident response
Employer & Industry UsageCybersecurity firms, tech companies, consultingCorporate IT, financial institutions, government agencies

Web Penetration Testing focuses on actively identifying vulnerabilities through simulated attacks, while Web Security Analysts monitor and improve security measures, analyze threats, and respond to incidents. Both roles require cybersecurity certifications but differ in their approach and daily tasks.

What are popular job titles related to Web Penetration Testing jobs in Ontario?

For Web Penetration Testing jobs in Ontario, the most frequently searched job titles are:

What job categories do people searching Web Penetration Testing jobs in Ontario look for?

The top searched job categories for Web Penetration Testing jobs in Ontario are:

What cities in Ontario are hiring for Web Penetration Testing jobs?

Cities in Ontario with the most Web Penetration Testing job openings:

Web Penetration Testing jobs near you
Infographic showing various Web Penetration Testing job openings in Ontario as of August 2026, with employment types broken down into 1% As Needed, 78% Full Time, 18% Part Time, 2% Contract, and 1% Nights. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution.

Senior Security Consultant (Web Application Penetration Tester)

NetSPI Canada Ltd

Toronto, ON • On-site

Full-time

Re-posted 2 days ago

Job description

NetSPI® is an award-winning pioneer of Penetration Testing as a Service (PTaaS) with its AI-powered platform supported by more than 350 in-house cybersecurity experts. Specializing in 50+ pentest types, attack surface visibility, vulnerability prioritization, and attack simulation, NetSPI delivers security testing with unprecedented clarity, speed, and scale.  

NetSPI is on an exciting growth journey as we disrupt and improve the proactive security market. We are looking for individuals with a collaborative, innovative, and customer-first mindset to join our team. Learn more about our award-winning workplace culture and get to know our A-Team at www.netspi.com/careers. 

Join the mission as a Senior Security Consultant. We are seeking a skilled and detail-oriented Penetration Tester to conduct thorough security assessments, identify vulnerabilities, and provide expert recommendations to strengthen our clients' security posture. As a Penetration Tester supporting web applications, you will work closely with clients to deliver clear, actionable reports and contribute to the development of security best practices. 

Responsibilities: 

  • Conduct engagements on web applications and underlying APIs independently and provide technical oversight 
  • Review reports for accuracy in technical oversight, perform weekly QA oversight, and provide mentoring support to others 
  • Create, deliver, and collaborate on penetration testing reports in diverse client environments, maintaining client-specific processes, reporting standards, and access protocols to help improve their security posture 
  • Research and develop innovative techniques, tools, and methodologies for penetration testing services, alongside commitment to improvement and execution on NetSPI specific products and processes 
  • Participate in development, implementation, and oversight of testing, delivery, and management strategies for key client accounts  
  • Perform administrative tasks related to day-to-day consulting activities to ensure smooth business and engagement operations. 

Minimum Qualifications: 

  • Bachelor’s degree or higher, with a focus on IT, Computer Science, Engineering or Math or equivalent experience 
  • Minimum of 3-5 years of work experience in Penetration Testing 
  • Familiarity with offensive tools, based on applicable skillset (e.g., Kali Linux, Burp Suite, Metasploit, Nessus) 
  • Familiarity with offensive and defensive IT concepts and protocols 
  • Extensive understanding of the OWASP Top 10, MITRE ATT&CK framework, and various security frameworks. 
  • Working knowledge of Windows, Linux and MacOS operating systems internals 
  • Experience mentoring or coaching to growing team members, while sharing knowledge externally through blogs, hosting webinars, or presenting at conferences   
  • Ability to work independently and as part of a team 
  • Proficient communication skills, both written and verbal 
  • Willingness to travel up to 5-10%  
  • This position requires an 8-hour workday, with occasional evenings or weekends necessary to meet project deadlines or critical needs 

Preferred Qualifications: 

  • Ability to provide technical and QA oversight on web applications and underlying APIs.  
  • Experience in one or more of the following programming or scripting languages (e.g., Ruby, Python, Perl, C, C++, Java, and C#)  
  • Offensive cybersecurity certifications (e.g., GXPN, GPEN, OSCP, GWAPT) 

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.