Top Cyber Security Jobs in Ottawa

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. Secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, identity lifecycle automation, and policy guardrails. Builds monitoring for anomalous access, supports incident response, conducts threat modeling, and maintains reliable IAM services with on-call responsibilities. Requires substantial security engineering and IAM experience, knowledge of modern identity protocols, programming or scripting proficiency, and security automation expertise.

Designs, deploys, and operates security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premises systems. Secures AI agents and non-human workloads through authentication, authorization, networking, policy-as-code, infrastructure-as-code, and automation. Addresses prompt injection, data and model poisoning, AI supply-chain risks, and MCP integrations. Leads security initiatives, infrastructure hardening, governance, and cross-functional efforts while participating in on-call rotations.

Monitor, triage, and investigate security alerts across identity, endpoint, email, SaaS, and cloud environments. Conduct routine incident investigations, gather evidence, document findings, support major incident response, and contribute to containment and recovery. Improve runbooks, tune detections, develop small scripts and automated workflows, and participate in post-incident reviews. Communicate clearly with global teammates while developing technical skills in security operations, incident response, threat detection, and automation.

Build and operate Affirm’s insider threat program, including investigative standards, detection use cases, controls, metrics, and reporting. Support insider risk investigations through telemetry and evidence analysis, threat modeling, and written recommendations. Partner with Legal, HR, Privacy, and Compliance on case handling and regulatory obligations. Improve DLP, endpoint monitoring, access governance, and SaaS security controls. Automate evidence collection, case routing, triage, and investigation workflows using Python, automation platforms, and agentic AI.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

Leads Affirm’s global security incident response and investigations program. Responsibilities include serving as incident commander, directing technical investigations, managing and developing response engineers, establishing readiness practices, improving detection and response tooling, implementing AI-assisted investigation workflows, and translating incident metrics into executive and board-level reporting.

Build and operate enterprise identity and access management systems at Affirm. Responsibilities include IAM lifecycle operations, access troubleshooting, automation, backend services, APIs, integrations, monitoring, and production support. The role focuses on SailPoint, Auth0, workforce identity events, secure infrastructure, and collaboration with Security, IT, and Engineering. Candidates should have software engineering experience, backend development skills, cloud familiarity, and knowledge of IAM technologies.

Leads Affirm’s third-party security risk management program, including international market due diligence, M&A security assessments, post-acquisition vendor integration, control evaluations, threat modeling, and remediation tracking. Designs automated workflows and integrations across GRC, ticketing, cloud, and identity systems using Python and agentic coding tools. Establishes processes, metrics, dashboards, and reporting while advising Legal, Procurement, Engineering, Finance, Compliance, Privacy, and leadership on security risks and decisions.

Develop and govern enterprise security architecture, roadmaps, policies, standards, reference architectures, and secure solution designs. Lead threat modeling, risk assessment, compliance, and resilience initiatives aligned with ISO, NIST, financial regulations, and cyber threats. Collaborate with business leaders, technical teams, vendors, and payment ecosystem stakeholders; facilitate working groups; present architectural recommendations; mentor security professionals; and mature the organization’s security architecture function.

Provides high-level business intelligence analysis, designs and implements BI architectures, applies data warehousing concepts, evaluates complex situations, and manages multiple projects. Requires strong analytical, research, critical-thinking, organizational, and bilingual French-English communication skills, along with an active Top Secret security clearance.

Designs, implements, and validates embedded security features for optical circuit switch platforms. Responsibilities include gNSI security services, authorization, credential and certificate management, secure zero-touch provisioning, device enrollment, TPM-backed attestation, measured boot, TLS/mTLS hardening, security automation, debugging, and supporting security reviews. The role requires embedded Linux development, cryptography, PKI, network-device security, and cross-platform troubleshooting.

Designs, implements, and validates embedded security features for optical circuit switch platforms. Responsibilities include gNSI security services, authorization, certificate management, secure zero-touch provisioning, device enrollment, TPM-backed attestation, measured boot, TLS and mutual TLS, security testing, debugging, and supporting security reviews. The role requires strong Python or Go skills, embedded Linux development, cryptography, PKI, network-device security, and secure credential lifecycle experience.

Develop and coordinate security, risk, and resilience awareness programs, training, communication strategies, and digital content. Consult stakeholders, collaborate with HR, Privacy, and Cyber Security teams, and deliver briefings to executives and working groups. Create dashboards, scorecards, and reports using metrics and trend analysis to evaluate program effectiveness. Manage online content, support campaign alignment, and recommend improvements that strengthen employee preparedness and security culture.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build Neuromorphic Labs’ enterprise go-to-market engine from the ground up. Identify strategic customers and design partners, generate pipeline, lead complex sales cycles, convert pilots into commercial deployments, and close early enterprise accounts. Shape positioning, messaging, pricing, customer narratives, and product priorities based on market feedback. Establish scalable GTM processes, tools, metrics, and operating rhythms while partnering closely with the founder and technical teams.

Lead the definition, design, prototyping, and launch of a production AI trust platform MVP. Translate complex technical concepts into requirements, workflows, interfaces, prototypes, and execution plans. Drive ambiguous initiatives from concept through launch, collaborate deeply with engineering and architects, engage customers and design partners, and support demos, presentations, marketing content, and early adoption.

Manages site security for construction projects, including security plans, sensitive and classified assets, incident and breach investigations, risk mitigation, emergency response, security meetings, compliance with PSPC requirements, and supervision of security coordinators. The role requires French-English bilingualism, eligibility for CISD Secret clearance, and collaboration with clients and stakeholders. Experience in security clearance administration, site and people management, PSPC registration, and ASIS certification is preferred.

Leads Cisco’s security solutions design and technical sales engineering team across Canada. Develops and executes security sales strategies, builds executive customer and partner relationships, presents business and technical value, and supports revenue growth. Oversees recruitment, mentoring, performance management, and solution development across identity, cloud, network, endpoint, XDR, SIEM, and SOAR capabilities. Partners with sales and cross-functional leadership to position Cisco security solutions competitively and deliver integrated architectures.

Develop and maintain embedded software for real-time network devices using C, C++, and Python. Responsibilities include full software lifecycle participation, debugging, testing, documentation, defect reduction, scripting, AI-assisted development, and collaboration with architects, verification teams, and release teams. The role supports secure, reliable connectivity technologies and requires a relevant bachelor’s degree, embedded programming proficiency, and internship, co-op, or applied project experience.

Leads enterprise security architecture strategy and governance across infrastructure, cloud, and applications. Conducts threat modeling, secure design reviews, application security assessments, and risk analyses for critical systems. Defines security policies, controls, reference architectures, and threat maps aligned with NIST, OWASP, and ISO 27001. Provides technical leadership, mentors teams, collaborates with engineering and security operations, evaluates security tooling, and supports secure SDLC, DevSecOps, and third-party solution assurance.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Conducts impartial research and analysis on justice, national security, legislation, public policy, and government operations. Prepares briefing notes, reports, presentations, and other analytical products for parliamentarians, committees, and parliamentary associations. Monitors policy and legislative developments, assesses implications, drafts legal documents, and collaborates with stakeholders and subject matter experts while maintaining confidentiality and professionalism.

Leads product security across Black Duck products by overseeing secure architecture, threat modeling, secure code reviews, security requirements, supply chain security, and secure development lifecycle controls. Builds security enablement and Security Champions programs, coordinates assessments and vulnerability remediation, supports PSIRT and incident response, measures security maturity, advises on regulatory obligations, and mentors engineering teams.

Lead security incident response and investigations across endpoint, cloud, identity, and application environments. Hunt threats, develop and tune detections, make containment decisions, and contribute to threat modeling, risk assessments, vulnerability remediation, security testing, and technical security standards. Coach engineers, document investigations, collaborate with IT, Engineering, Legal, and Compliance, and responsibly use AI tools while protecting sensitive information.

Own technical customer onboarding and deployment from initial scoping through value realization. Configure the platform, integrations, workflows, agents, and automations; write Python scripts and build custom solutions using APIs. Troubleshoot integrations and data flows, investigate issues using logs and telemetry, and communicate evidence-based findings to engineering. Bridge customer and internal teams, provide technical guidance, and use AI tooling to accelerate delivery and automate repetitive implementation tasks.