Top Cyber Security Jobs in Ottawa

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

The Senior Security Engineer I will build and maintain core security infrastructure, collaborate with global teams, mentor junior engineers, and drive security initiatives.

Lead radio security engineering and system-level verification across lab and field environments. Design and validate software mitigations, run vulnerability analysis and protocol testing, reproduce and debug field issues, build and operate verification labs, and develop AI-enabled automation and CI/CD integrations to orchestrate security tools and produce structured reports.

Drive radio security studies and systemize security functionality for radio and RAN components. Decompose security requirements into implementable system requirements, lead technical investigations and cross-disciplinary decisions, support architects and development teams on secure implementations, and promote continuous product security improvements and knowledge sharing across the Radio organization.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, automate GRC workflows with Python and agentic coding tools, maintain integrations across ticketing and risk platforms, and develop dashboards and reporting. Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to support risk-informed decisions and mature security governance processes.

Lead Forward Financing’s application and product security program, including pentesting, code review, vulnerability remediation, AI security testing, secure SDLC practices, and external exposure controls. Manage and develop senior security engineers, establish testing standards and remediation SLAs, build security services, and partner with engineering and executives to prioritize risk across web applications, APIs, cloud infrastructure, and AI-built software.

Supports application security across product and engineering teams by reviewing code, configurations, designs, logs, and vulnerabilities. Assesses and prioritizes risks, guides remediation, contributes scripts, detections, tests, secure defaults, and automation, and improves vulnerability management workflows. Collaborates with technical and non-technical stakeholders to communicate risk, recommend mitigations, and connect AppSec practices to customer trust, compliance, resilience, and business outcomes.

Supports application security across product and engineering teams by reviewing code, configurations, designs, vulnerabilities, and pull requests. Helps triage and prioritize security findings, provides remediation guidance, develops scripts and automation, and promotes secure coding practices. The role communicates risk to technical and non-technical stakeholders, collaborates cross-functionally, and develops offensive, defensive, and software engineering skills.

Lead detection, incident response, and digital forensics across macOS/Windows/Linux; act as Incident Commander, triage alerts, use SIEM, build investigation scripts and automated runbooks, collaborate with stakeholders on insider threat and security operations improvements.

Manage security operations, incident response, detection engineering, vulnerability and patch oversight, SaaS and endpoint security, cybersecurity risk assessments, and AI security strategy. Lead and develop security engineers, serve as senior Incident Commander, tune CrowdStrike detections, build coverage across endpoint, SaaS, identity, cloud, and proxy signals, and communicate security risks to technical and executive stakeholders.

Lead and coordinate pre-sales activities to develop and present cross-practice technical solutions. Support consulting, advisory, and architecture teams, build customer and partner relationships, and deliver demos, proofs of concept, and compelling technical presentations to drive profitable deals.

Lead product strategy and execution for Cluster Linking to deliver one-click disaster recovery, streamlined migrations, and secure cross-organization stream sharing. Drive adoption, packaging, pricing, customer engagement, and cross-functional alignment to grow the product.

The Director of Product Management will lead product strategy across infrastructure, software enablement, and customer-facing platforms, enhancing both technical and user experience while managing a team of product managers.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Own security for Spade's production edge: manage PKI and mutual-TLS certificate lifecycle, design private network connectivity and webhook delivery security, drive vulnerability remediation, codify secure-build standards, and collaborate across engineering and product to improve overall security posture.

Lead multi-year product strategy for non-human identity and security across MongoDB Atlas, core DB engine, and developer platforms. Drive workload identity federation, passwordless/zero-trust access, MCP/AI agent authorization, developer-first access management, partner with engineering, UX, and GTM to prioritize and measure adoption, and represent MongoDB at industry events and customer briefings.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

The Senior Security Engineer will secure cloud infrastructure across various services, develop security policies, manage exceptions, and respond to security alerts while collaborating with teams to eliminate security risks.

Lead and scale strategic partner motions (channels, GSIs, ISVs, OEMs, cloud, silicon) to drive joint go-to-market plans, revenue, and market expansion. Build executive relationships, enable partners technically and commercially, establish pipeline governance, and coordinate product, sales, marketing, and engineering to convert partner potential into measurable customer impact.

Serve as the primary technical advisor for SMB sales opportunities, partnering with Account Executives throughout sales cycles. Lead technical discovery, product demonstrations, proof-of-value engagements, competitive evaluations, security questionnaires, RFPs, and technical documentation. Advise IT, security, developer, DevOps, and executive stakeholders on identity, endpoint, SaaS, secrets, cloud, and AI security solutions. Collaborate cross-functionally to improve demos, playbooks, enablement, and customer education.

Lead technical strategy and architecture for software security across Block. Design and deliver security solutions, drive Secure SDLC adoption, threat model critical systems, mentor engineers, and execute high-priority security initiatives for scalable, resilient security services and mobile/platform security.

Own full sales cycle for Southern California enterprise accounts: source and close new logos, build executive relationships, run ROI-driven POCs, collaborate with Sales Engineering, and meet ARR targets through repeatable, metric-based sales strategies.