SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: CAD 146,000 - 190,000 / annual
Motive is a platform that empowers teams running physical operations—transportation, logistics, construction, energy, field service, manufacturing, agriculture, food and beverage, retail, and public sector—with tools for safety, productivity, and profitability. The company serves nearly 100,000 customers, from Fortune 500 enterprises to small businesses, and combines fleet management, driver monitoring, equipment tracking, and financial visibility in a single system powered by industry-leading AI.
As a Red Team Security Engineer, you will be a key member of the Product Security Team, serving as the primary security partner for software and engineering teams. You will evaluate the organization's security posture through adversary emulation and offensive security assessments, with a focus on cloud environments.
Responsibilities:
- Plan and execute red team operations, adversary simulations, and targeted security assessments focused on cloud environments
- Evaluate the security of cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services
- Identify and validate attack paths involving IAM misconfigurations, overprivileged roles, secrets exposure, metadata abuse, insecure automation, and weaknesses in cloud service configurations
- Assess detection and response coverage by exercising logging, alerting, monitoring, and incident response processes in partnership with blue team and detection engineering functions
- Track emerging attacker techniques, cloud exploitation trends, and new abuse paths relevant to modern enterprise environments
- Drive remediation efforts of identified security issues
Requirements:
- 5+ years of experience in offensive security, red teaming, penetration testing, and detection validation
- Familiarity with attacker tactics, techniques, and procedures, and the ability to map findings to frameworks such as MITRE ATT&CK
- Ability to write concise, actionable reports and communicate complex technical issues to diverse stakeholders
- Relevant industry certifications such as OSCP, OSEP, GXPN, GPEN, or cloud security certifications preferred
