About iGears
iGears Canada is the Edmonton office of iGears Technology Limited, a software company founded in Hong Kong in 2004. We develop and run 20 of our own SaaS products and have shipped 200+ apps for clients including listed companies, public-sector bodies, NGOs, universities and churches. Our Edmonton office opened in 2024, and we are now building a cybersecurity team in Canada to deliver penetration testing for clients and to secure our own platforms.
Work arrangements
Full-time and part-time arrangements are welcome. On-site or hybrid arrangements are welcome.
What you’ll do
- Plan and run penetration tests of web applications, APIs and mobile apps for clients in Canada and Hong Kong, following OWASP WSTG, ASVS and MASVS
- Test how applications connect to third-party services (OAuth, webhooks, payment and messaging APIs) and cloud environments
- Verify every finding by hand, rate risk with CVSS, and write clear reports with fix guidance for developers and management
- Retest fixes and issue verification letters
- Scope engagements with clients: rules of engagement, test accounts, testing windows and written authorisation
- Test and harden iGears’ own SaaS platforms, and coach our developers on secure coding
- Work with our Hong Kong team on joint engagements across time zones
What you’ll bring
- OSCP, or an equivalent hands-on certification (e.g. CREST CRT or CCT, GIAC GPEN or GWAPT, eWPTX, PNPT)
- At least 2 years of hands-on penetration testing, with web application and API testing as core skills
- Strong command of Burp Suite and common testing tools; scripting in Python, Bash or similar
- Clear written English for client reports
- Legal entitlement to work in Canada
Nice to have
- OSWE, OSEP, BSCP or CREST CCT APP
- Mobile (iOS/Android), Active Directory or cloud (AWS, Azure, GCP) testing
- Source code review
- Experience testing applications in regulated sectors such as financial services
- CVEs, bug bounty findings or a CTF track record
What we offer
- CAD $80,000–110,000 a year, depending on experience and certifications
- Real client engagements, plus 20 in-house SaaS products to test and secure
- A founding role in our Canadian security team, reporting to our CTO
- Paid vacation, health and dental cover where eligible, and support for relevant training and certification exams
Explore our platforms before you apply
- AI: GenCMS (gen-cms.com), AskCore (askcore.org), HumanLevelUP (humanlevelup.org), PromoPilot (promo-pilot.org), Webetter (webetter.co), PhotoCen (photocen.com), Duckbot (duckbot.hk, preview)
- Business operations: fileEC (fileec.com), InsightBook (insightbook.org), HRFlowTech (hrflowtech.com), MemberSys (membersys.org), AppointSys (appointsys.org), Paperless.Cards (paperless.cards)
- Messaging and marketing: SendPromotion.Email (sendpromotion.email), SendSMS.click (sendsms.click), MarketHK (markethk.net)
- Education and community: LearnSys (learnsys.org), ITChurch (itchurch.online)
- Directories: E12 (e12.hk, e12.ca) and E12 Careers (jobs.e12.hk, jobs.e12.ca)
More at https://www.igears.ca and https://www.igears.com.hk/platforms/
How to apply
Email your CV to [email protected] with the subject “Security Consultant (PT) – Your Name”. Please include links to or IDs for your certifications (e.g. OffSec credential link, CREST or Credly badge), and your expected salary and earliest start date.
iGears welcomes applications from all qualified candidates. If you need an accommodation at any stage of the recruitment process, please let us know.
We use the information you send us only to assess your application. Applications may be stored and processed by iGears Technology Limited, including by staff and systems in Hong Kong. For questions about how we handle your information, or to ask for our policies on service providers outside Canada, contact Richard Iu, CTO, at [email protected].
https://e12.ca/pages/company.php?slug=igears-technology
iGears Canada is the Edmonton office of iGears Technology Limited, a software company founded in Hong Kong in 2004. We develop and run 20 of our own SaaS products and have shipped 200+ apps for clients including listed companies, public-sector bodies, NGOs, universities and churches. Our Edmonton office opened in 2024, and we are now building a cybersecurity team in Canada to deliver penetration testing for clients and to secure our own platforms.
Global
Canada
Hong Kong