Senior Security Specialist (Global Security)

RBC•Toronto, ON

2d•Hybrid

About The Position

This role involves executing web and mobile application testing with a focus on digital crime scenarios in mature production environments. The specialist will actively participate in the full lifecycle of projects, from idea development and proposal writing to execution and stakeholder debriefs. Additionally, the role includes mentoring and providing technical guidance to junior team members, and helping to evolve and improve team processes and service offerings.

Requirements

5+ years in cybersecurity, with offensive web and mobile application experience
One or more, OSCP, OSCE, OSMR, CRTO, other reputable technical certifications or related to AI security
OSWE, BSCP and other reputable technical certifications or related to web application security
Mobile application and device testing experience for Android and iOS
Deep understanding of web application and offensive security testing techniques, including: OWASP Web Security Testing Guide and OWASP Mobile Application Security Testing Guide (MASTG)
Working knowledge of programming languages and frameworks including but not limited to JavaScript, SQL, AngularJS, Node.js, React, etc.
Familiarity with web services and data exchange formats such as JSON, SOAP, REST, and XML

Nice To Haves

Purple and AI Red Teaming experience
Experience in the financial sector
Programming/scripting experience in Python, C#, C/C++
Building and managing C2 infrastructure
Social engineering tactics
Exploitation across operating systems, applications, and devices

Responsibilities

Execute web and mobile application testing with a focus on digital crime scenarios in mature production environments.
Actively participate in the full lifecycle of projects — from idea development and proposal writing to execution and stakeholder debriefs.
Mentor and provide technical guidance to junior team members.
Help evolve and improve team processes and service offerings.