Top Cyber Security Jobs in Ottawa

Lead radio security engineering and system-level verification across lab and field environments. Design and validate software mitigations, run vulnerability analysis and protocol testing, reproduce and debug field issues, build and operate verification labs, and develop AI-enabled automation and CI/CD integrations to orchestrate security tools and produce structured reports.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Conduct manual penetration testing, secure code reviews, and SAST triage across web applications, APIs, and AWS infrastructure. Develop AI-assisted security tooling, define testing approaches for LLM applications and agentic systems, and review AI-generated software before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while improving secure SDLC practices.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, automate GRC workflows with Python and agentic coding tools, maintain integrations across ticketing and risk platforms, and develop dashboards and reporting. Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to support risk-informed decisions and mature security governance processes.

Lead Forward Financing’s application and product security program, including pentesting, code review, vulnerability remediation, AI security testing, secure SDLC practices, and external exposure controls. Manage and develop senior security engineers, establish testing standards and remediation SLAs, build security services, and partner with engineering and executives to prioritize risk across web applications, APIs, cloud infrastructure, and AI-built software.

Supports application security across product and engineering teams by reviewing code, configurations, designs, vulnerabilities, and pull requests. Helps triage and prioritize security findings, provides remediation guidance, develops scripts and automation, and promotes secure coding practices. The role communicates risk to technical and non-technical stakeholders, collaborates cross-functionally, and develops offensive, defensive, and software engineering skills.

Lead detection, incident response, and digital forensics across macOS/Windows/Linux; act as Incident Commander, triage alerts, use SIEM, build investigation scripts and automated runbooks, collaborate with stakeholders on insider threat and security operations improvements.

Manage security operations, incident response, detection engineering, vulnerability and patch oversight, SaaS and endpoint security, cybersecurity risk assessments, and AI security strategy. Lead and develop security engineers, serve as senior Incident Commander, tune CrowdStrike detections, build coverage across endpoint, SaaS, identity, cloud, and proxy signals, and communicate security risks to technical and executive stakeholders.

Lead and coordinate pre-sales activities to develop and present cross-practice technical solutions. Support consulting, advisory, and architecture teams, build customer and partner relationships, and deliver demos, proofs of concept, and compelling technical presentations to drive profitable deals.

Lead product strategy and execution for Cluster Linking to deliver one-click disaster recovery, streamlined migrations, and secure cross-organization stream sharing. Drive adoption, packaging, pricing, customer engagement, and cross-functional alignment to grow the product.

The Director of Product Management will lead product strategy across infrastructure, software enablement, and customer-facing platforms, enhancing both technical and user experience while managing a team of product managers.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Own security for Spade's production edge: manage PKI and mutual-TLS certificate lifecycle, design private network connectivity and webhook delivery security, drive vulnerability remediation, codify secure-build standards, and collaborate across engineering and product to improve overall security posture.

Lead multi-year product strategy for non-human identity and security across MongoDB Atlas, core DB engine, and developer platforms. Drive workload identity federation, passwordless/zero-trust access, MCP/AI agent authorization, developer-first access management, partner with engineering, UX, and GTM to prioritize and measure adoption, and represent MongoDB at industry events and customer briefings.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.