Posting record
Open 10+ days
- Sphynx's site dates the posting
- Ghostless first sees this listing
- Last checked: still up
How we know
It hasn't been reposted, listed twice, or left up unusually long, and the posting doesn't say it's a talent pool.
Ghostless records the day it first sees a posting, so a repost can't reset its age. This one was already up when Ghostless started tracking Sphynx, so its true age is longer.
Last checked Nov 1, 2026.
How well do you match?
See how much of this posting your resume shows, and what it's missing.
Upload your resumeWhat it asks of you
- 2+ years of experience
- Bachelor's degree asked for
What the posting discloses
Not stated: Pay, real vacancy, AI screening.
Why these three
Ontario requires postings from employers with 25 or more staff to state the pay, whether the vacancy exists, and whether AI screens applicants.
Some employers add pay only on their own site. Check the original posting before you rule it out.
Skills mentioned
About the role
The Penetration Tester / Application Security (AppSec) specialist at Sphynx is responsible for identifying and addressing security vulnerabilities within applications and systems, as well as perform penetration tests for our clients. This role involves performing penetration tests, security assessments, and providing actionable recommendations to enhance the overall security posture.
Responsibilities
- Conduct penetration testing on web, mobile, and network applications to identify security risks.
- Perform static and dynamic application security testing and code reviews.
- Identify and report security vulnerabilities, providing detailed risk analysis and remediation guidance.
- Collaborate with development teams to integrate secure coding practices and improve the security lifecycle.
- Develop and maintain security testing tools and documentation.
- Stay current with emerging security threats, vulnerabilities, and mitigation techniques.
- Assist in designing and implementing application security policies and standards.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or related field.
- At least 2 years of professional experience in penetration testing and application security assessments.
- Strong knowledge of web application security, OWASP Top 10, and common vulnerabilities.
- Experience with penetration testing tools such as Burp Suite, Metasploit, Nessus, or similar.
- Proficiency in scripting and programming languages (e.g., Python, JavaScript).
- Understanding of secure software development lifecycle (SDLC).
- Excellent analytical, problem-solving, and communication skills.
- Relevant certifications such as OSCP, CEH, or GIAC (GWAPT) are highly desirable.
Benefits
- Competitive remuneration package adjusted to proven skills and experience;
- Excellent working conditions;
- Exposure to training and professional development capabilities, including the ability to engage in cutting-edge research;
- Exposure to international clients and collaborators.
Something wrong with this posting?