Senior Penetration Tester

About

New Value Solutions, a national IT consulting company, is seeking a Senior Penetration Tester to perform hands‑on penetration testing activities as part of a public‑sector cybersecurity program. This role focuses on identifying, exploiting, and documenting security vulnerabilities across complex enterprise IT environments. The successful candidate will work under the direction of a Red Team Leader.

Responsibilities

• Perform hands‑on penetration testing across network, web, and cloud environments
• Conduct vulnerability exploitation and technical security assessments
• Execute social engineering testing where applicable
• Document findings, evidence, risk ratings, and remediation steps
• Support development of penetration testing reports and briefings
• Follow defined rules of engagement and security policies
• Collaborate with Red Team leadership and engagement stakeholders
• Maintain strict confidentiality throughout all testing activities

Requirements

• Minimum 6 years experience conducting penetration testing on complex environments
• Minimum 5 years hands‑on experience exploiting vulnerabilities
• Strong experience with industry‑standard penetration testing tools and methodologies
• Experience testing network infrastructure, web applications, and cloud platforms
• Strong technical documentation and reporting skills
• Ability to obtain Enhanced Security Clearance (Canada)
• OSCP or GPEN (or equivalent) certification is required

If you have this expertise, and are able to work in Canada, please submit your resume. While we thank all candidates in advance for their application, only those candidates who are shortlisted will be contacted.

ID#5342

The hourly rate range for this position is $95 – $120, with the final rate based on consultant experience and fit for the role.

Questions

• How many years of experience do you have with hands‑on penetration testing?
• Which environments have you tested (network, web, cloud)?
• What penetration testing tools and methodologies do you use most frequently?
• Are you eligible for Enhanced Security Clearance in Canada?
• Do you currently hold OSCP, GPEN, or equivalent certification?