Penetration Testing Analyst
Sun Life Financial
You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful. When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives. Discover how you can make a difference in the lives of individuals, families and communities around the world.Job Description:
At Sun Life, we work together, share common values, and encourage growth and achievement. We are seeking a skilled Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems. This role is primarily focused on Penetration Testing delivery, with secondary exposure to Red Team activities, contributing to adversary simulation exercises where required. The successful candidate will have strong technical testing capabilities, with an interest in developing broader offensive security skills.What you will do:
Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools.Conduct testing in line with established methodologies and security frameworks (e.G., OWASP).Produce clear, structured reports outlining: Vulnerabilities and root cause Business impact and risk rating Practical remediation recommendationsPerform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage.Support re-testing activities to validate remediation of identified issues.Support Red Team or adversary simulation exercises where required.Contribute to reconnaissance and attack surface mapping, Identification of potential attack paths.Support documentation of attack paths and identified security gaps.Assist in controlled exploitation activities under guidance, including:
Initial access techniquesLimited post-exploitation validation (e.G., privilege escalation concepts, lateral movement awareness)
Collaborate with senior team members to understand real-world attacker behavior and techniques.What you need to succeed:
Bachelor’s degree in computer science, Information Security, or a related field. Practical PenTesting Certifications such as OSCP, OSWA, CWES & BSCP etc... are desired but not required.Core Penetration Testing Skills (Essential)
2+ years of hands-on professional experience in:
Web application security testing (OWASP Top 10)API security testingBasic network/infrastructure testing
Strong understanding of:
Authentication, session management, and access control flawsInput validation and injection vulnerabilities
Experience with tools such as: Burp Suite, Nmap, sqlmap, or similarAbility to perform manual testing beyond automated scanning.Strong documentation and reporting skills, with focus on clear risk articulation.Red Teaming Skills (Desirable – Foundational Level)
Basic understanding of adversary simulation concepts and attack lifecycle.Familiarity with: Reconnaissance techniques Common initial compromise methods Awareness of: Privilege escalation and lateral movement concepts Attack paths across enterprise environments Interest in developing Red Team and offensive security capabilities over time.Unique requirement:
Must be able to satisfactorily complete applicable background checks prior to the start date and during employment, in accordance with Sun Life’s policies and practices.What’s in it for you:
We’re honoured to be recognized as a 2026 Best Workplaces in Canada by Great Place to Work® Canada. We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®, for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health. Wellness programs that support the three pillars of your health - mental, physical, and financial The opportunity to move along a variety of career paths with amazing networking potential. As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results. Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds. Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to View email address on ca.hrm.tc. We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you. We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.Salary Range: 70,000/70 000 - 105,000/105 000 Job Category: IT - Technology Services Posting End Date: 25/10/2026Shine together At Sun Life, you can be your most brilliant self. Our supportive, flexible, and inclusive work environment is one where you - and your career - can thrive. Whatever your aspirations, collaborative leaders and colleagues are ready to help you learn, grow, and succeed. Make life brighter We’re a global company with a passion for people. Our purpose is to help Clients achieve lifetime financial security and live healthier lives. As a team of 30,000 across 26 countries, our impact is far-reaching, and locally relevant There’s power in numbers. As part of Sun Life’s growing team, you have an impact on people in your community and around the world. Shape the future With an optimistic eye on a brighter future, we drive to innovate. Be part of leading change, push boundaries and try new ways of working. Use data to drive bold actions. Be agile and pivot as we test and learn. At Sun Life, we’re driving transformation, sustainability and innovation for our Clients, employees, partners, and communities. Join us. Together, we can make the future brighter. Join a top employer for a brighter future.
#J-18808-Ljbffr
At Sun Life, we work together, share common values, and encourage growth and achievement. We are seeking a skilled Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems. This role is primarily focused on Penetration Testing delivery, with secondary exposure to Red Team activities, contributing to adversary simulation exercises where required. The successful candidate will have strong technical testing capabilities, with an interest in developing broader offensive security skills.What you will do:
Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools.Conduct testing in line with established methodologies and security frameworks (e.G., OWASP).Produce clear, structured reports outlining: Vulnerabilities and root cause Business impact and risk rating Practical remediation recommendationsPerform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage.Support re-testing activities to validate remediation of identified issues.Support Red Team or adversary simulation exercises where required.Contribute to reconnaissance and attack surface mapping, Identification of potential attack paths.Support documentation of attack paths and identified security gaps.Assist in controlled exploitation activities under guidance, including:
Initial access techniquesLimited post-exploitation validation (e.G., privilege escalation concepts, lateral movement awareness)
Collaborate with senior team members to understand real-world attacker behavior and techniques.What you need to succeed:
Bachelor’s degree in computer science, Information Security, or a related field. Practical PenTesting Certifications such as OSCP, OSWA, CWES & BSCP etc... are desired but not required.Core Penetration Testing Skills (Essential)
2+ years of hands-on professional experience in:
Web application security testing (OWASP Top 10)API security testingBasic network/infrastructure testing
Strong understanding of:
Authentication, session management, and access control flawsInput validation and injection vulnerabilities
Experience with tools such as: Burp Suite, Nmap, sqlmap, or similarAbility to perform manual testing beyond automated scanning.Strong documentation and reporting skills, with focus on clear risk articulation.Red Teaming Skills (Desirable – Foundational Level)
Basic understanding of adversary simulation concepts and attack lifecycle.Familiarity with: Reconnaissance techniques Common initial compromise methods Awareness of: Privilege escalation and lateral movement concepts Attack paths across enterprise environments Interest in developing Red Team and offensive security capabilities over time.Unique requirement:
Must be able to satisfactorily complete applicable background checks prior to the start date and during employment, in accordance with Sun Life’s policies and practices.What’s in it for you:
We’re honoured to be recognized as a 2026 Best Workplaces in Canada by Great Place to Work® Canada. We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®, for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health. Wellness programs that support the three pillars of your health - mental, physical, and financial The opportunity to move along a variety of career paths with amazing networking potential. As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results. Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds. Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to View email address on ca.hrm.tc. We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you. We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.Salary Range: 70,000/70 000 - 105,000/105 000 Job Category: IT - Technology Services Posting End Date: 25/10/2026Shine together At Sun Life, you can be your most brilliant self. Our supportive, flexible, and inclusive work environment is one where you - and your career - can thrive. Whatever your aspirations, collaborative leaders and colleagues are ready to help you learn, grow, and succeed. Make life brighter We’re a global company with a passion for people. Our purpose is to help Clients achieve lifetime financial security and live healthier lives. As a team of 30,000 across 26 countries, our impact is far-reaching, and locally relevant There’s power in numbers. As part of Sun Life’s growing team, you have an impact on people in your community and around the world. Shape the future With an optimistic eye on a brighter future, we drive to innovate. Be part of leading change, push boundaries and try new ways of working. Use data to drive bold actions. Be agile and pivot as we test and learn. At Sun Life, we’re driving transformation, sustainability and innovation for our Clients, employees, partners, and communities. Join us. Together, we can make the future brighter. Join a top employer for a brighter future.
#J-18808-Ljbffr
Vacancy posted 47 minutes ago
Similar jobs that could be interesting for youBased on the Penetration Testing Analyst in Winnipeg, MB vacancy
$135k - $180k per year
S&P Global Corporate The Role: Lead Penetration Test Engineer Location: Hybrid 2 days per week onsite on one of our following sites: US: Boston, MA, Chicago, IL, Dallas, TX, Houston, TX, Englewood, CO, Raleigh, NC, Princeton, NJ, New York, NY, Southfield, MI, Washington...SuggestedSecond jobLive InWorldwideFlexible hours2 days per week- Apply hands-on penetration testing and vulnerability analysis to fixed-line telecommunications infrastructure in a fully remote contractor role based in Canada.This position targets experienced security professionals who understand complex operator environments. You will examine...SuggestedFor contractorsRemote work
- Shape cross-sector penetration testing at Desjardins Group through source code analysis and ethical vulnerability exploitation. Coordinate mandates without fixed scopes.This senior advisor position supports full-scope intrusion testing for high-impact attack scenarios across...Suggested
- ...Android applications as a client-facing consultant specializing in penetration testing, reverse engineering, and mobile security assessments. The work spans complete engagements.This Security Consultant scopes, tests, reports, and presents findings for mobile applications and...Suggested
- Apply penetration testing and secure code review expertise as an Application Security Engineer at TMX, supporting products across global capital... ...vulnerability tracking, remediation, and risk managementAutomate security tests within CI/CD pipelinesRequirements: Three-plus years of...Suggested
- Apply penetration testing expertise to complex cloud environments, using AWS, Microsoft Azure, and GCP to uncover vulnerabilities. This Canada-based senior role supports production security.As a Senior Security Specialist, you will investigate attack paths and assess cloud...
$105k - $120k per year
...expertise in designing and implementing enterprise-scale security processes Practical knowledge of ethical hacking and penetration testing techniques Experience with vulnerability management tools and security orchestration platforms Ability to collaborate...Work at office2 days per week3 days per week- ...systems are for millions of users worldwide? We're looking for Penetration Testing Experts to join AI red team engagements — probing, attacking,... ...Commitment: 10–40 hours/week What You'll Do Conduct penetration tests against AI-powered applications, APIs, and infrastructure to...Hourly payOngoing contractContract workFreelanceRemote workWorldwideFlexible hours
- Build enterprise security resilience as a Senior Cybersecurity Penetration Tester with TELUS Cyber Security. Work remotely and mobile across client testing engagements.Reporting to the Principal, Cyber Security Professional Services, you will contribute to client security testing...Remote work
- Infrastructure penetration testing and red team expertise define this Ethical Hacker role at Packetlabs. Work remotely within Canada across enterprise... ....Key Responsibilities: Plan infrastructure penetration tests across enterprise environmentsValidate vulnerabilities through...Remote work
$90k - $120k per year
...Packetlabs was built by an ethical hacker after seeing vulnerability assessments presented as penetration tests. Our sloga n "Ready for more than a VA scan?" drives at the importance of not providing our clients with a false sense of security. We are a passionate team of...Immediate startRemote workFlexible hours- A career as a Senior Analyst Control Testing atNational Bank means acting as a specialist to carry out control tests, documentprocedures and results and define action plans when control performance doesnot meet expectations. This position allows you to have a positive impact...Flexible hours
$70k - $90k per year
We are seeking an experienced Senior Mainframe Test Analyst with deep expertise in Mainframe applications and testing methodologies. The candidate will be responsible for planning, designing, executing, and managing testing activities for mission-critical Mainframe systems...Work at office3 days per week$122.1k - $162.8k per year
...About the Role The McKesson Pentest Team is seeking a Lead Penetration Testing Engineer to help scale McKesson's Continuous Adversarial Testing... ...repeatable onboarding processes covering application context, test accounts, authentication, authorization roles, test data, rate...Long term contractRemote work$55.5k - $120k per year
Application Deadline: 11/29/2026Address: 250 Yonge StreetJob Family Group: Business ManagementExecutes testing to provide insights and recommendations on test results, findings, identified issues, re-performance testing, and continuous improvement insights. Executes testing...Part time- ...hybrid QA environment, supporting automated testing across enterprise applications from... ...Calgary.This Automated Quality Assurance Analyst contract supports software quality throughout... ...Responsibilities: Develop and maintain automated test scripts using established standardsDesign...Contract work
- Specialize in VuGen scripting and complex SQL queries while applying performance testing expertise across internet and legacy application environments.This Performance Test Analyst role requires more than five years of performance testing experience across varied application...
- ...anglais Expérience : 5 à 8 ans en assurance qualité logicielle, dont au moins 3 ans en automatisation des tests À propos du posteAmaris Consulting recherche un(e) analyste en automatisation de l’assurance qualité pour développer et maintenir des solutions de test...Day shift3 days per week
- Apply SAST, DAST, and SCA expertise as an Application Security Analyst supporting development teams within a large banking environment.... ...technology teams to assess vulnerabilities and review security testing results. The work includes vulnerability management, software development...
- Apply analytical and testing expertise at BMO Financial Group, reviewing cyber controls from... ...documentation.As a Cyber Controls Testing Analyst, you will execute complex testing, monitoring... ...BMO.Key Responsibilities: Execute test programs across business groups and control...
- ...Montreal, offensive security team of a major Canadian bank.Pentest / Tests d intrusionOSCPOSEPOSWESecurite applicativeThe context A... ...mission Run end-to-end application, infrastructure and cloud penetration test engagements on internal assetsDocument vulnerabilities and...Freelance2 days per week
- Application security and penetration testing define this six-month freelance mission in Montreal. Work hybridly with an offensive security team supporting a major Canadian bank.As a Senior Penetration Tester, you will assess internal applications, infrastructure, and cloud assets...Freelance
$100k - $120k per year
...platforms by coordinating business readiness, requirements validation, testing activities, stakeholder engagement, and production readiness... ...project teams. Experience with Azure DevOps, Jira, or similar test and defect management tools. Experience delivering large-scale energy...Long term contractWorldwide- À Brossard, exercez comme analyste QA hybride en français et anglais, avec une expertise en tests logiciels et systèmes d’alarme incendie.Amaris Consulting recherche un analyste en assurance qualité logicielle comptant 5 à 8 ans d’expérience. Vous planifierez, exécuterez et...
- EmergiTEL is hiring a QA Test Analyst for our client in the Financial Services (Banking) industry.Contract Duration 04 Months with possible extensionLocation Calgary, AB (100% Remote)Job Description We are looking for QA Test Analyst, you will be part of a...Contract workRemote work
- Lieu de travail: Quebec City, Quebec, Montreal, Quebec Flexibilité du lieu de travail: Plusieurs emplacements dans le pays ID demande: 10771 Date de début de publication: 04/08/2026 Chez Fujitsu, nous avons pour mission de créer un monde plus durable en renforçant ...Day shift
- FOP CONSULTANTS recherche des Analystes en test AQ motivés pour réaliser des mandats dans les secteurs TIC et Sciences de la Vie. Vous élaborerez les plans et scénarios de test, exécuterez les tests fonctionnels et de non-régression, et suivrez les anomalies en collaboration...
- Apply analytical QA expertise to systems validation, data testing, and defect resolution with database queries and DevOps knowledge. This... ...connects testing with delivery.The Senior QA Systems Test Analyst reviews specifications, identifies requirements, and designs coverage...
- FOPCONSULTANTS recherche un Analyste AQ senior maîtrisant les tests fonctionnels et la non-régression. Le mode de travail peut être à distance, hybride ou sur site.Vous réaliserez des mandats comme analyste en test AQ senior. Le poste mobilise la planification des tests, le...Remote work
- Faites progresser la qualité des projets avec FOP CONSULTANTS comme Analyste en Test AQ senior à Montréal. Ce poste hybride requiert des compétences avancées en tests fonctionnels et en validation. FOP CONSULTANTS recrute un Analyste en Test AQ avec un minimum de 10 ans d...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Penetration Testing Analyst. Be the first to apply!
Related searches
- healthcare analyst Winnipeg, MB
- IT analyst Winnipeg, MB
- investigative analyst Winnipeg, MB
- records analyst Winnipeg, MB
- sustainability analyst Winnipeg, MB
- disability analyst Winnipeg, MB
- documentation analyst Winnipeg, MB
- sap analyst Winnipeg, MB
- health and safety analyst Winnipeg, MB
- construction analyst Winnipeg, MB

