Top Cyber Security Jobs in Ottawa

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Partner with sales teams to win strategic data security opportunities. Deliver technical presentations, gather customer requirements, lead product evaluations, configure solutions, and design test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection knowledge, AI fluency, and collaboration across matrixed go-to-market and partner teams.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Conduct red team operations, adversary simulations, penetration testing, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services; identify attack paths and configuration weaknesses; validate detection and response capabilities; track emerging attacker techniques; and drive remediation through concise reporting and stakeholder communication.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Conduct AI-driven security assessments across software, hardware, and firmware; develop AI-enabled offensive and defensive security tooling; identify and remediate vulnerabilities; test LLMs, agentic workflows, and cloud environments; and guide organization-wide AI security strategy. Partner with engineering and leadership, lead threat-modeling sessions, and communicate security findings and recommendations to senior stakeholders.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to stakeholders, build investigation tools and automated workflows, and improve security operations processes. The role requires Python scripting, SIEM experience, cloud security knowledge across AWS and GCP, and forensic analysis across macOS, Windows, and Linux.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the detection lifecycle, advance detection-as-code with Git, testing, CI/CD, and observability, and improve data ingestion and enrichment. Evaluate AI-assisted security capabilities, translate threat intelligence into detections, and partner with Security Operations during investigations and incident exercises. The role requires strong Python and SQL skills, SIEM expertise, AWS and Linux knowledge, and independent project leadership.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Lead radio security engineering and system-level verification across lab and field environments. Design and validate software mitigations, run vulnerability analysis and protocol testing, reproduce and debug field issues, build and operate verification labs, and develop AI-enabled automation and CI/CD integrations to orchestrate security tools and produce structured reports.

Leads a team responsible for product security, vulnerability management, software assurance, secure manufacturing, and cloud security applications. Establishes vulnerability remediation processes, manages SCA tools, oversees SBOM and VEX reporting, secures software signing and release operations, and develops secure customer-facing cloud platforms and APIs for exchanging trusted device and product-security information.

Test software, firmware, hardware, cloud, PC applications, and documentation throughout the product lifecycle. Design and execute tests, analyze results, report defects, perform root-cause analysis, and collaborate with cross-functional R&D teams. Develop automated testing concepts and maintain automation frameworks and regression suites using Selenium or Playwright. Contribute to test strategies, quality processes, and release qualification.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Supports information security compliance programs, regulatory and framework assessments, risk mitigation, audit preparation, remediation tracking, policy maintenance, and security program improvements. The role coordinates evidence collection, manages risk exceptions and registers, monitors international regulations, supports penetration testing reviews, and maintains incident response and business continuity documentation. It also partners with Legal, auditors, stakeholders, and security leads to strengthen the organization’s security posture and compliance roadmap.

Provides expert leadership for integrating cybersecurity into enterprise architecture, modernization, and transformation initiatives. Defines security principles, reference architectures, design patterns, standards, controls, and guardrails across IT, operational technology, cloud, and application environments. Reviews solution designs, applies threat and risk intelligence, supports architecture governance, and promotes interoperability across cybersecurity platforms. The role collaborates with enterprise architecture, technology teams, and business stakeholders in a regulated, safety-critical environment.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Coordinates cybersecurity procedures, monitoring, reporting, incident and vulnerability follow-up, audits, documentation, and continuous improvement. Oversees managed security providers, evaluates their findings and recommendations, coordinates internal remediation, and presents risks and strategies to leadership, customers, and staff. Supports security investigations, control assessments, regulatory inspections, audit responses, and security technology or compliance projects within a regulated life sciences environment.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Conduct manual penetration testing, secure code reviews, and SAST triage across web applications, APIs, and AWS infrastructure. Develop AI-assisted security tooling, define testing approaches for LLM applications and agentic systems, and review AI-generated software before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while improving secure SDLC practices.

Owns product management for managed security services onboarding. Translates product vision into engineering plans, prioritizes cross-team backlogs, defines requirements, facilitates project ceremonies, monitors telemetry and operational metrics, and drives scalable self-service onboarding experiences. Partners with Product, Engineering, Customer Success, Operations, and technical support to improve customer adoption, time to value, and long-term success across Arctic Wolf’s product portfolio.