Top Cyber Security Jobs in Ottawa

Build and operate enterprise identity and access management systems at Affirm. Responsibilities include IAM lifecycle operations, access troubleshooting, automation, backend services, APIs, integrations, monitoring, and production support. The role focuses on SailPoint, Auth0, workforce identity events, secure infrastructure, and collaboration with Security, IT, and Engineering. Candidates should have software engineering experience, backend development skills, cloud familiarity, and knowledge of IAM technologies.

Build Revel’s security program from the ground up, securing its product, infrastructure, cloud, on-premises, hardware-integrated environments, and software delivery pipelines. Responsibilities include threat modeling, security architecture, Infrastructure as Code, detection and incident response, vulnerability management, compliance with ITAR/NIST/CUI/CMMC requirements, customer security reviews, and security enablement. The role will establish foundational processes and may eventually lead a growing security team.

Leads Affirm’s third-party security risk management program, including international market due diligence, M&A security assessments, post-acquisition vendor integration, control evaluations, threat modeling, and remediation tracking. Designs automated workflows and integrations across GRC, ticketing, cloud, and identity systems using Python and agentic coding tools. Establishes processes, metrics, dashboards, and reporting while advising Legal, Procurement, Engineering, Finance, Compliance, Privacy, and leadership on security risks and decisions.

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build Neuromorphic Labs’ enterprise go-to-market engine from the ground up. Identify strategic customers and design partners, generate pipeline, lead complex sales cycles, convert pilots into commercial deployments, and close early enterprise accounts. Shape positioning, messaging, pricing, customer narratives, and product priorities based on market feedback. Establish scalable GTM processes, tools, metrics, and operating rhythms while partnering closely with the founder and technical teams.

Lead the definition, design, prototyping, and launch of a production AI trust platform MVP. Translate complex technical concepts into requirements, workflows, interfaces, prototypes, and execution plans. Drive ambiguous initiatives from concept through launch, collaborate deeply with engineering and architects, engage customers and design partners, and support demos, presentations, marketing content, and early adoption.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Design and present secure networking, cloud, and cybersecurity solutions for public-sector customers. Responsibilities include architecture, proof-of-concept evaluations, technical workshops, RFP responses, customer and partner enablement, issue resolution, and collaboration with account managers and technical teams. The role requires expertise in network security, firewalls, routing, VPNs, identity, encryption, cloud, SD-WAN, SASE, zero trust, and related protocols. Travel is primarily regional with occasional travel elsewhere.

Support sales representatives and global systems integrator partners with technical strategy, solution design, proof-of-concept engagements, presentations, and technical deal closure. Develop go-to-market offerings, position Fortinet security solutions, manage multiple opportunities, maintain customer relationships, and document technical activity in Salesforce. The role requires strong knowledge of network and cybersecurity technologies, including authentication, encryption, firewalls, routing, switching, and security protocols.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

Coordinates physical and operational security activities for an Ottawa construction site, maintaining compliance with federal protocols, corporate policies, and project requirements. Liaises with Security Operations, Facilities, HR, Legal, IT, clients, subcontractors, and government stakeholders. Oversees incident and crisis management, electronic security systems, documentation, audits, emergency response, and continuous improvement initiatives. Requires substantial physical security experience, strong communication and leadership skills, and a valid or obtainable Government of Canada security clearance.

Leads NAV CANADA’s enterprise security programs and governance, including strategy, risk management, compliance, assurance, protective security, resilience, and critical infrastructure protection. Advises senior leaders, develops policies and frameworks, manages security incidents and continuity planning, builds security culture, leads managers and professionals, and collaborates with regulators, government agencies, law enforcement, and internal stakeholders. The role is hybrid with occasional domestic, transborder, and international travel.

Leads AI security strategy, governance, risk assessments, control design, regulatory readiness, and remediation oversight. Advises business and technology stakeholders on AI risks, secure architecture, adversarial threats, monitoring, and resilience. Establishes standards and controls aligned with AI risk frameworks, leads governance forums, tracks risk metrics, and delivers executive-ready guidance. The role requires extensive information security or technology risk experience, strong AI security knowledge, and the ability to influence stakeholders across a regulated financial institution.

Maintains a safe and welcoming casino environment by monitoring operations, patrolling gaming and public areas, securing money transfers, responding to incidents and emergencies, preparing reports, supporting responsible gaming, and enforcing company policies and AGCO regulations. Provides guest assistance, conflict resolution, loss prevention, and discreet escalation of suspicious or illegal activity. The role requires extended standing and walking, occasional lifting up to 50 pounds, and work in a regulated, sometimes noisy casino environment.

Develops, implements, and supports information security systems and applications. Monitors and analyzes security events, performs vulnerability assessments and penetration testing, develops security automation and monitoring use cases, configures identity and access controls, and integrates application security tools into CI/CD pipelines. Provides mitigation strategies, remediation prioritization, technical recommendations, audit support, and security education in a complex university IT environment.

Deliver hands-on network and security consulting across client environments, including infrastructure administration, firewall and cloud security, ZTNA deployment, hardening, vulnerability remediation, and incident response support. Maintain backup and recovery systems, produce technical documentation, and communicate with stakeholders during routine and crisis operations. Participate in on-call rotations, extended incident-response shifts, client engagements, service scoping, and continuous improvement.

Maintains and secures cloud and network infrastructure in a highly secure, mission-critical environment. Responsibilities include monitoring, observability, automation, Infrastructure as Code, CI/CD support, incident response, troubleshooting, capacity planning, reliability engineering, and Zero Trust implementation. The role is exclusively onsite in Ottawa and requires Canadian citizenship, 10 years of verifiable Canadian history, and eligibility for Canadian government security clearance.

Maintains a safe, secure, and welcoming casino environment by monitoring operations, patrolling gaming and public areas, responding to incidents, enforcing regulations, supporting emergency coordination, protecting money transfers, preparing reports, assisting guests, and promoting responsible gaming and alcohol service.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.