Top Cyber Security Jobs in Ottawa

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

Develops, implements, and supports information security systems and applications. Monitors and analyzes security events, performs vulnerability assessments and penetration testing, develops security automation and monitoring use cases, configures identity and access controls, and integrates application security tools into CI/CD pipelines. Provides mitigation strategies, remediation prioritization, technical recommendations, audit support, and security education in a complex university IT environment.

Deliver hands-on network and security consulting across client environments, including infrastructure administration, firewall and cloud security, ZTNA deployment, hardening, vulnerability remediation, and incident response support. Maintain backup and recovery systems, produce technical documentation, and communicate with stakeholders during routine and crisis operations. Participate in on-call rotations, extended incident-response shifts, client engagements, service scoping, and continuous improvement.

Lead customer-facing security architecture engagements across Microsoft Azure and Microsoft 365. Advise customers on Zero Trust, cloud security, identity and access management, threat protection, data security, and compliance. Run architectural design sessions, develop end-to-end solutions, resolve technical blockers, improve security posture, and drive adoption of Microsoft Security products. Collaborate with customers, partners, engineering, consulting, and global security teams to deliver business value.

Customer-facing Cloud Solution Architect specializing in Microsoft security technologies. Advises customers on Azure and Microsoft 365 security transformation, Zero Trust, identity and access management, threat protection, data security, and compliance. Leads architectural design sessions, develops end-to-end security solutions, resolves implementation blockers, drives product adoption, and coordinates Microsoft, partner, and consulting stakeholders. The role requires customer relationship management, executive presentations, solution architecture expertise, and successful completion of Microsoft and Canadian government security screenings.

Maintains and secures cloud and network infrastructure in a highly secure, mission-critical environment. Responsibilities include monitoring, observability, automation, Infrastructure as Code, CI/CD support, incident response, troubleshooting, capacity planning, reliability engineering, and Zero Trust implementation. The role is exclusively onsite in Ottawa and requires Canadian citizenship, 10 years of verifiable Canadian history, and eligibility for Canadian government security clearance.

Maintains a safe, secure, and welcoming casino environment by monitoring operations, patrolling gaming and public areas, responding to incidents, enforcing regulations, supporting emergency coordination, protecting money transfers, preparing reports, assisting guests, and promoting responsible gaming and alcohol service.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Partner with sales teams to win strategic data security opportunities. Deliver technical presentations, gather customer requirements, lead product evaluations, configure solutions, and design test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection knowledge, AI fluency, and collaboration across matrixed go-to-market and partner teams.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Conduct red team operations, adversary simulations, penetration testing, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services; identify attack paths and configuration weaknesses; validate detection and response capabilities; track emerging attacker techniques; and drive remediation through concise reporting and stakeholder communication.

Serves as the primary security services contact for customers, guiding the integration and effective use of Akamai web security products. Collaborates with cross-functional and sales teams to understand customer needs, tune solutions, implement security and web technologies, and improve delivery methodologies. Requires expertise in internet protocols, CDN operation, web development, IT systems, security practices, consultative customer engagement, and project management. Must be able to obtain and maintain Canadian government clearance.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Develop and govern enterprise security architecture, roadmaps, policies, standards, reference architectures, and secure solution designs. Lead threat modeling, risk assessment, compliance, and resilience initiatives aligned with ISO, NIST, financial regulations, and cyber threats. Collaborate with business leaders, technical teams, vendors, and payment ecosystem stakeholders; facilitate working groups; present architectural recommendations; mentor security professionals; and mature the organization’s security architecture function.

Supports information security compliance through control assessments, evidence gathering, audit support, exception reviews, regulatory reporting, third-party risk assessments, policy governance, and secure-by-design reviews. Tracks findings and remediation actions, maintains compliance documentation, prepares management reports, and collaborates with stakeholders across security, technology, procurement, legal, privacy, and project teams. The role applies frameworks including ISO 27001, NIST, SWIFT CSP, and related financial-sector regulations and standards.

Provides end-to-end security consultancy, customer integration, and technical support for Akamai solutions. Serves as the primary customer contact, leads integrated account teams, improves service delivery, identifies risks and enhancements, and communicates with customers, partners, and internal teams. Requires strong knowledge of network or web security technologies, customer-facing IT experience, technical project delivery skills, and the ability to manage multiple priorities.

Conduct AI-driven security assessments across software, hardware, and firmware; develop AI-enabled offensive and defensive security tooling; identify and remediate vulnerabilities; test LLMs, agentic workflows, and cloud environments; and guide organization-wide AI security strategy. Partner with engineering and leadership, lead threat-modeling sessions, and communicate security findings and recommendations to senior stakeholders.