Suncor Energy

Web Application Pentester

Suncor Energy$110K — $130K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • 7+ years in cybersecurity with 5+ years of manual testing of modern web applications and APIs
  • Bachelor's degree in cyber security, information technology, computer science, or a related field
  • Experience directly collaborating with development teams on remediation and secure design
  • Proficiency with Burp Suite or similar tools, REST, microservice API testing, and secure code review in Java, .NET, or JavaScript/TypeScript
  • Strong knowledge of OWASP Top 10, ASVS, SDLC, and DevSecOps practices, as well as modern authentication protocols
  • Excellent communication skills for conveying risks to both technical and non-technical stakeholders
  • Experience in supporting red or purple team engagements or utilizing AI for security tasks is an asset

Responsibilities

  • Plan and conduct manual penetration tests on web applications and APIs, identifying critical security flaws per OWASP Top 10 and ASVS
  • Create proof-of-concept exploits to assess vulnerabilities without disrupting operations and validate remediation effectiveness
  • Evaluate authentication and authorization implementations, including OAuth 2.0, OIDC, and SAML
  • Lead secure design reviews and threat modelling sessions while making recommendations for secure code practices
  • Collaborate with development teams to prioritize vulnerabilities and coach them on secure coding throughout the SDLC
  • Support application security tools and help develop streamlined processes
  • Contribute to red team and purple team exercises, enhancing detection and response efforts

Benefits

  • Competitive compensation with annual bonuses and long-term financial rewards
  • Comprehensive health, dental, and vision benefits for employees and their families
  • Generous paid vacation and personal time-off to promote work-life balance
  • Focused on employee development through talent development programs and internal mobility opportunities
Full Job Description
We are seeking a hands-on Web Application Pentester who is passionate about working directly with developers to eliminate vulnerabilities at the source. Sitting within our Cyber Defense organization, you will find, explain, and help fix security weaknesses in the applications and APIs that run our business, with periodic opportunities to join red and purple team engagements.

What we offer:

We recognize your contribution and offer a range of rewards and development opportunities designed to support your success. Benefits/perks listed below may vary depending on the nature of your employment with Suncor and the region where you work.
  • Strong compensation: we offer competitive compensation, regional-based uplifts, annual bonuses, and long-term financial rewards. We also help you save for your future by offering pension programs, and savings plans with company matching
  • Benefits: utilize an employee assistance program and comprehensive company-paid health, dental, and vision benefits for you and your family to support your mental, physical, and financial well-being
  • Generous time-off: enjoy generous paid vacation time and personal time-off to recharge and maintain a healthy work-life balance
  • Talent development programs: Internal mobility, succession planning, and employee training and development programs are just a few ways we're dedicated to your development


Minimum Requirements:
  • 7+ years in cybersecurity, including 5+ years of hands-on manual testing of modern web applications and APIs
  • Bachelor's degree in cyber security, information technology, computer science, or a related field
  • Demonstrated experience working directly with development teams to drive remediation and secure design decisions
  • Hands-on skill with Burp Suite or equivalent, REST and microservice API testing, threat modelling, and secure code review in Java, .NET, or JavaScript/TypeScript
  • Strong grounding in OWASP Top 10, ASVS, and the Cheat Sheet Series; SDLC and DevSecOps practices; server-side authorization and IAM; and modern authentication protocols (OAuth 2.0, OIDC, SAML)
  • Excellent written and verbal communication, with the ability to explain risk to both engineers and executives
  • Experience supporting red or purple team engagements, securing OT/ICS environments, or leveraging AI to enhance secure code review, threat modelling, and vulnerability discovery is considered a strong asset


Don't have all the qualifications listed? That's ok! Apply anyway. We acknowledge the value of transferable skills.

Responsibilities:
  • Plan and execute manual penetration tests against web applications and APIs, surfacing business logic flaws, broken access control, injection, and authentication and session weaknesses aligned to OWASP Top 10 and ASVS
  • Build safe proof-of-concept exploits that demonstrate real impact without disrupting operations, and retest fixes to confirm they hold
  • Test authentication and authorization implementations, including OAuth 2.0, OIDC, SAML, and token-based API access
  • Lead secure design reviews, threat modelling sessions, and source code reviews, recommending secure patterns and reusable controls
  • Partner with development teams to triage findings, agree on practical fixes, and coach secure development practices across the SDLC
  • Support pipeline security tooling (SAST, DAST, SCA, and Infrastructure-as-Code scanning) and help teams tune out noise
  • Contribute application-layer attack paths to red team campaigns and purple team exercises with SOC and detection engineering
  • Produce reports that pair developer-ready detail with concise executive impact summaries, and translate findings into actionable backlog items with reproduction steps, severity, and acceptance criteria


Location and other Key Details:
  • This is an office-based role. You will work out of our Calgary head office, located in the Suncor Energy Centre at 150 - 6th Ave S.W
  • Hours of work are a regular 40-hour work week, Monday to Friday with occasional site visits
  • Our business professional roles follow internal compensation guidelines, and the pay band will generally be based on years of experience and scope of work


Think we are a fit? Apply now!

About Suncor Energy

Suncor pioneered commercial development of Canada's Athabasca oil sands — one of the world's largest petroleum resource basins. Since then, Suncor has grown to become a globally-competitive, Canadian-based integrated energy company with a balanced portfolio of high quality assets, a strong balance sheet and significant growth prospects.

Suncor Energy Careers

Join the dynamic team at Suncor Energy, a leader in energy innovation and sustainability. As a company committed to responsible development, Suncor offers unparalleled job opportunities in the energy sector, fostering a culture of leadership, diversity, and continuous growth.

Work You’ll Do

At Suncor Energy, you will engage in meaningful work that pushes the boundaries of traditional energy sources towards cleaner, sustainable alternatives. Our team at Suncor is dedicated to excellence and innovation, working together to master the challenges of energy transformation.

Innovate and Lead

Step into a role that harnesses your skills for impactful changes. Suncor Energy is not just a company; it's a community of professionals driving forward with leadership and innovative solutions. Here, your career will be future-proofed through diverse opportunities in a variety of disciplines from engineering to environmental management.

Professional Growth and Development

Suncor Energy is deeply invested in the professional growth of its employees. With comprehensive training programs and robust diversity initiatives, we ensure that every team member has the resources and opportunities to flourish professionally. Our leadership is committed to nurturing talents through hands-on projects, leadership roles, and continuous learning environments.

Join Our Inclusive Team

Diversity and inclusion are at the core of our employment philosophy. At Suncor, every employee, from interns to senior professionals, brings unique perspectives that are vital for our innovative endeavors. We believe in building a workplace where everyone can thrive, supported by a culture that fosters acceptance and teamwork.

Explore Career Opportunities

Whether you’re starting your career or looking to take it to the next level, Suncor Energy offers a range of positions across multiple fields. Explore job opportunities and internships that align with your career aspirations and skills. Our hiring process is transparent and thorough to ensure that all candidates are given a fair chance to succeed.

Benefits of Joining Suncor Energy

Choosing a career at Suncor means more than just employment. It’s about having access to a variety of benefits that support your professional and personal life. From health and wellness programs to competitive retirement plans, we prioritize the well-being of our team members.

Stay Connected Through Networking

Networking at Suncor Energy opens doors to collaborative projects and professional development. Engage with industry leaders and peers through our internal networking platforms, and stay updated with the latest industry trends and opportunities.

Apply Now

Ready to advance your career at Suncor Energy? Check out our current job openings, tailor your resume, and prepare for an interview that could set you on a path of rewarding challenges and growth. Join us in shaping the future of energy, today.

SEARCH SUNCOR ENERGY JOBS

Keep up to date with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who work here.

READ CAREERS BLOG

Job Alert Emails Customize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities waiting for you at Suncor Energy.
Learn more about Suncor Energy
Size
16,922 employees
Market Cap
$41.4 billion
Industry
5 Year Trend
+7.9%
NASDAQ

Similar Jobs

More Jobs at Suncor Energy

More Information Technology Jobs

Find similar Web Application Pentester jobs: