Top Cyber Security Jobs in Ottawa

Leads Affirm’s global security incident response and investigations program. Responsibilities include serving as incident commander, directing technical investigations, managing and developing response engineers, establishing readiness practices, improving detection and response tooling, implementing AI-assisted investigation workflows, and translating incident metrics into executive and board-level reporting.

Build and operate enterprise identity and access management systems at Affirm. Responsibilities include IAM lifecycle operations, access troubleshooting, automation, backend services, APIs, integrations, monitoring, and production support. The role focuses on SailPoint, Auth0, workforce identity events, secure infrastructure, and collaboration with Security, IT, and Engineering. Candidates should have software engineering experience, backend development skills, cloud familiarity, and knowledge of IAM technologies.

Leads Affirm’s third-party security risk management program, including international market due diligence, M&A security assessments, post-acquisition vendor integration, control evaluations, threat modeling, and remediation tracking. Designs automated workflows and integrations across GRC, ticketing, cloud, and identity systems using Python and agentic coding tools. Establishes processes, metrics, dashboards, and reporting while advising Legal, Procurement, Engineering, Finance, Compliance, Privacy, and leadership on security risks and decisions.

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build Neuromorphic Labs’ enterprise go-to-market engine from the ground up. Identify strategic customers and design partners, generate pipeline, lead complex sales cycles, convert pilots into commercial deployments, and close early enterprise accounts. Shape positioning, messaging, pricing, customer narratives, and product priorities based on market feedback. Establish scalable GTM processes, tools, metrics, and operating rhythms while partnering closely with the founder and technical teams.

Lead the definition, design, prototyping, and launch of a production AI trust platform MVP. Translate complex technical concepts into requirements, workflows, interfaces, prototypes, and execution plans. Drive ambiguous initiatives from concept through launch, collaborate deeply with engineering and architects, engage customers and design partners, and support demos, presentations, marketing content, and early adoption.

Leads enterprise security architecture strategy and governance across infrastructure, cloud, and applications. Conducts threat modeling, secure design reviews, application security assessments, and risk analyses for critical systems. Defines security policies, controls, reference architectures, and threat maps aligned with NIST, OWASP, and ISO 27001. Provides technical leadership, mentors teams, collaborates with engineering and security operations, evaluates security tooling, and supports secure SDLC, DevSecOps, and third-party solution assurance.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Conducts impartial research and analysis on justice, national security, legislation, public policy, and government operations. Prepares briefing notes, reports, presentations, and other analytical products for parliamentarians, committees, and parliamentary associations. Monitors policy and legislative developments, assesses implications, drafts legal documents, and collaborates with stakeholders and subject matter experts while maintaining confidentiality and professionalism.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Leads the Security Operations Centre's platform engineering, resilience, automation, AI, data pipeline, SIEM, XDR, and compliance capabilities. Develops the SOC modernization strategy, ensures platform availability, security, recoverability, data integrity, and auditability, and manages engineers and strategic vendors. The role partners with technology, identity, cloud security, compliance, audit, and executive teams to reduce cybersecurity risk and deliver reliable, scalable services across Canada.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Design and present secure networking, cloud, and cybersecurity solutions for public-sector customers. Responsibilities include architecture, proof-of-concept evaluations, technical workshops, RFP responses, customer and partner enablement, issue resolution, and collaboration with account managers and technical teams. The role requires expertise in network security, firewalls, routing, VPNs, identity, encryption, cloud, SD-WAN, SASE, zero trust, and related protocols. Travel is primarily regional with occasional travel elsewhere.

Support sales representatives and global systems integrator partners with technical strategy, solution design, proof-of-concept engagements, presentations, and technical deal closure. Develop go-to-market offerings, position Fortinet security solutions, manage multiple opportunities, maintain customer relationships, and document technical activity in Salesforce. The role requires strong knowledge of network and cybersecurity technologies, including authentication, encryption, firewalls, routing, switching, and security protocols.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

Develop and implement security and privacy improvements across Tailscale’s codebase. Audit features for vulnerabilities, conduct threat modeling and security analysis, drive mitigations, and promote secure coding practices through guidance and training. The role spends at least half its time writing software and requires expertise in application security, web and API vulnerabilities, cryptography, networking protocols, and platform development.

Leads StackAdapt’s security monitoring, threat hunting, incident response, digital forensics, and security operations program. Analyzes telemetry across endpoints, cloud resources, email, and network systems; directs major investigations, containment, remediation, and root-cause analysis; develops threat intelligence, response playbooks, security awareness training, and compliance evidence. Provides technical leadership and mentorship to analysts, advises internal teams, reports security metrics, and supports security control assurance and audit activities.

Coordinates physical and operational security activities for an Ottawa construction site, maintaining compliance with federal protocols, corporate policies, and project requirements. Liaises with Security Operations, Facilities, HR, Legal, IT, clients, subcontractors, and government stakeholders. Oversees incident and crisis management, electronic security systems, documentation, audits, emergency response, and continuous improvement initiatives. Requires substantial physical security experience, strong communication and leadership skills, and a valid or obtainable Government of Canada security clearance.

Leads NAV CANADA’s enterprise security programs and governance, including strategy, risk management, compliance, assurance, protective security, resilience, and critical infrastructure protection. Advises senior leaders, develops policies and frameworks, manages security incidents and continuity planning, builds security culture, leads managers and professionals, and collaborates with regulators, government agencies, law enforcement, and internal stakeholders. The role is hybrid with occasional domestic, transborder, and international travel.

Owns new-logo enterprise growth across Northern California by developing territory plans, building CISO and security-leader relationships, managing full sales cycles, running outcome-based proofs of value, co-selling with partners, maintaining Salesforce forecasts, and exceeding revenue targets. The role sells an AI SOC platform to security operations, threat hunting, detection engineering, procurement, and executive stakeholders.

Design and build foundational security services for NVIDIA DGX Cloud’s large-scale GPU infrastructure. Develop automated Infrastructure-as-Code and Policy-as-Code enforcement, orchestration guardrails, identity and secrets services, scanning APIs, and security response systems. Integrate security products into API-first platforms and CI/CD workflows, conduct threat modeling, and secure distributed cloud-native systems. Collaborate with infrastructure, security, and product engineering teams across omni-cloud and on-premise environments.

Build secure, production-critical payment infrastructure for AI agent transactions. Design Python and FastAPI services, APIs, domain models, provisioning workflows, and cryptographic payment flows. Ensure scalability, reliability, observability, security, and comprehensive testing. Use Kubernetes, AWS, Terraform, and GitOps to automate infrastructure. Collaborate with product, security, infrastructure, platform, and card-network partners while applying AI-assisted engineering practices.