Offensive Security Lead, Ahuntsic North

This role sits at the intersection of

hands‑on offensive security, people leadership, and delivery excellence . You’ll work closely with Sales, Product, and Leadership to support scoping, improve delivery processes, and help evolve our service offerings as the business scales.

Responsibilities Manage and execute offensive security engagements

Oversee and contribute to penetration tests, red team activities, and advanced security assessments.

Act as the technical escalation point for complex findings, edge cases, and client questions.

Lead and mentor the offensive security team

Manage a team of pentesters and security engineers, providing technical guidance, feedback, and career development.

Foster a culture of learning, curiosity, and high professional standards.

Ensure delivery quality and consistency

Own engagement scoping, execution quality, and reporting standards.

Ensure findings are accurate, reproducible, risk‑focused, and actionable for engineering and compliance teams.

Support sales and pre‑sales efforts

Partner with Sales on technical discovery calls, scoping discussions, and proposal input.

Help prospects understand real‑world risk, testing depth, and value beyond checkbox compliance.

Improve delivery operations

Track and improve key delivery metrics (SLA adherence, retesting turnaround, utilization, client satisfaction).

Identify bottlenecks and continuously refine delivery processes and tooling.

Contribute to service evolution

Provide hands‑on input into the design and refinement of service lines (e.g., Red Teaming, AI/LLM testing, Secure Code Review, IoT).

Help operationalize new offerings by defining scope, methodology, and delivery standards.

Requirements

6–8+ years

in offensive security with strong hands‑on experience in penetration testing, red teaming, or related domains.

2–3+ years

in a technical leadership or management role within a consultancy or internal security team.

Proven experience managing client engagements end‑to‑end in a professional services environment.

Strong understanding of manual testing methodologies and frameworks (OWASP, ASVS, WSTG and NIST 800).

Working knowledge of compliance and audit contexts (SOC 2, ISO 27001, PCI DSS) and how offensive testing maps to them.

Ability to balance technical depth with delivery ownership and people management.

Clear, confident communicator with engineers, executives, and non‑technical stakeholders.

Bias toward action, accountability, and high‑quality outcomes.

Nice to Have

Experience working with SaaS, FinTech, or HealthTech companies.

Familiarity with PTaaS or portal‑driven delivery models.

Offensive security certifications such as

OSCP, OSEP, OSCE , or equivalent.

#J-18808-Ljbffr