Rooted
Back to jobs
SS
Open role

Software Secured

Junior Penetration Tester

Canada· REMOTE

Operator+ signal

About the role

Penetration testing as a service means the same product gets tested every quarter, so you get to see whether your last report changed anything. The team is small and remote across Canada. Report quality is treated as part of the craft, not paperwork after it.

What you will do

  • Test web applications and APIs against an agreed scope
  • Write findings with impact, reproduction steps and a concrete fix
  • Walk developers through the finding on a call

What they ask for

  • Solid grasp of the OWASP Top 10 beyond naming it
  • Experience testing authentication and authorisation logic
  • Clear written English
  • Legally able to work in Canada

Nice to have

  • Public write-ups or CVEs
  • Experience with GraphQL

What applying with Rooted means

This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.

Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.

You can read this role without an account. To apply you need a Rooted credential.

This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Software Secured. Confirm the final details with the original source or during the application process.

Posted 2026-08-12