Senior Cybersecurity Engineer- Offensive

Senior Cybersecurity Engineer – Offensive Join to apply for the Senior Cybersecurity Engineer- Offensive role at CAAT Pension Plan At CAAT, we’re passionate about what we do. And it shows Here, you’ll find a cultural spark in everything we do – from the way we partner with members and employers, to the way we work, collaborate, and grow. It doesn’t just feel different at CAAT. It is different. We’re one of the fastest-growing pensions in the country for a reason. We challenge the status quo, making a real impact on the hundreds of employers we serve – from education institutions to major corporations and household brands. And we’re just getting started. Driven by core values and a shared purpose, we’re fierce champions for better retirement security, known for our can-do culture where everyone plays a role in bringing our vision to life. If this sounds like a fit, we’d love you to be a part of it. About The Role The Senior Cyber Security Engineer – Offensive Security will play a critical role within the Security Operations team, not only safeguarding the organization's IT infrastructure, applications, and data against cyber threats, but also proactively identifying and exploiting vulnerabilities to strengthen overall defenses. This role requires advanced expertise in offensive security practices, including penetration testing, red teaming, and adversary simulation—alongside traditional responsibilities such as security monitoring, incident response, vulnerability management, and cloud security. In addition, the position demands specialized skills in AI/ML operations, with a focus on testing applications developed using low code/no code platforms and securing CI/CD pipelines that support machine learning workflows. The engineer will leverage AI-powered testing tools and automation to assess, validate, and continuously monitor the security of these modern environments, ensuring robust protection against evolving threats and maintaining a resilient security posture for the organization. As the newest member of our team, you will Lead offensive security testing for AI/ML pipelines, low code/no code platforms, and cloud environments, identifying and exploiting vulnerabilities to strengthen defenses. Integrate security into development processes, collaborating with teams to ensure secure coding and configuration, and proactively address risks in web, mobile, and API applications. Oversee incident response and threat management, leveraging SIEM tools and real-time intelligence to detect, contain, and remediate cyber threats. Mentor junior staff and communicate security risks and solutions to stakeholders. Continuously assess and improve application security, focusing on identity management, threat modeling, and validation against the latest vulnerabilities. To succeed, you bring At least 10 years of hands‑on experience in offensive cybersecurity, including penetration testing, red teaming, adversary simulation, application security assessments, vulnerability exploitation, and incident response in enterprise environments. Bachelor’s degree or higher in Computer Science, Cybersecurity, or a related technical field. Advanced offensive security certifications (e.g., OSCP, OSCE, OSEP, GPEN, GWAPT) plus foundational certifications (e.g., CISSP, CEH, Security+). Strong understanding and practical application of security standards and frameworks (ISO 27001, NIST, CIS, MITRE ATT&CK). Deep knowledge of technical configurations and security controls across operating systems (Windows, Linux, VMware) and security solutions (IDS/IPS, DLP, SIEM, WAF, VPNs, encryption), with the ability to identify and exploit weaknesses. Exceptional analytical and problem‑solving skills for simulating real-world attacks, identifying security gaps, and providing actionable remediation. Hands‑on experience with cloud security and offensive assessments for cloud platforms (AWS, Azure, GCP), including securing diverse workloads with tools like Wiz Cloud and Defender CSPM. Benefits Opportunities to Build a Better You: We never stand still. As we grow, so do you. Enjoy a place that provides endless opportunities to learn and master your skills while cultivating new ones. Comprehensive & Holistic Care: Be at your best with a Total Rewards program that feeds and prioritizes your physical, mental, and financial wellness. From flexible work arrangements, comprehensive benefits to wellness incentives, and a defined benefit pension plan – we have you covered. A Place to Collaborate and Win: We’ve built a lively environment where creativity and open communication thrive. It’s why we’re consistently recognized as one of ‘Canada’s Most Admired Corporate Cultures’, one of ‘Greater Toronto’s Top Employers’, and one of the ‘Best Places to Work’. Work that Truly Matters. You’re giving Canadians the opportunity for better retirement security, and organizations the chance to do more. Learn more about us by visiting www.caatpension.ca/careers Diversity, Equity, Inclusion, and Belonging (DEIB) DEIB at CAAT means we respect and value the broadest range of experiences, geographies, gender, ethnicities, backgrounds, and perspectives as key elements of our culture. Our vision is to provide an environment where employees can bring their best, professional, authentic selves to work. Equal Opportunity Employer Statement CAAT Pension Plan is an equal opportunity employer, and we will accommodate any needs under the Accessibility for Ontarians with Disabilities Act and the Ontario Human Rights Code. Hiring processes will be modified to remove barriers to accommodate those with disabilities, if requested. Should any applicant require accommodation through the application processes, please contact us at hr@caatpension.ca or call Human Resources at 416-673-9000 for assistance. #J-18808-Ljbffr