Top Cyber Security Jobs in Ottawa

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Leads Jhpiego’s global security strategy, policies, risk mitigation, crisis and incident response, travel security, business continuity, investigations, training, and physical asset protection. Manages security vendors, intelligence networks, emergency response plans, executive travel safety, and global security personnel. Provides mentorship, cross-cultural leadership, and technical guidance across international programs, particularly in conflict-affected regions.

Provides expert-level support within a 24x7 security operations center, leading complex customer escalations and high-impact investigations. Builds automated case playbooks, training materials, and knowledge content; troubleshoots security tooling and services; performs root-cause analysis; and partners cross-functionally on improvements. Audits support quality, coaches analysts, and applies expertise in endpoint, SIEM, cloud, identity, network, phishing, threat detection, AI, and incident response practices.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Leads a team responsible for product security, vulnerability management, software assurance, secure manufacturing, and cloud security applications. Establishes vulnerability remediation processes, manages SCA tools, oversees SBOM and VEX reporting, secures software signing and release operations, and develops secure customer-facing cloud platforms and APIs for exchanging trusted device and product-security information.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Designs enterprise cybersecurity architectures, reference patterns, strategies, and roadmaps spanning identity, endpoints, vulnerability management, security operations, analytics, automation, and emerging AI capabilities. Evaluates technology integration, interoperability, risks, and future-state designs; establishes guardrails for secure AI adoption; and collaborates with architects, engineers, operations teams, vendors, and executives to translate emerging technologies into practical cybersecurity solutions.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Senior HR Business Partner supporting technical and business teams through organizational design, manager coaching, employee relations, performance and talent management, compensation, workforce planning, organizational change, and people program execution. The role uses workforce insights to advise leaders, manage employee matters, improve organizational effectiveness, and support healthy growth across a scaling technology company.

Leads security engineering strategy and remains hands-on designing, coding, and scaling enterprise security capabilities. Builds automation, platforms, APIs, and reusable frameworks; guides cloud, infrastructure, identity, application, endpoint, and AI security. Establishes architectures, standards, and guardrails, influences executives and engineering teams, evaluates technology risks, mentors senior technical staff, and advances secure adoption of emerging technologies across cloud-native and SaaS environments.

Lead and build the company’s information security program while initially owning IT operations. Responsibilities include protecting source code and hardware designs, securing developer infrastructure and software supply chains, managing identity and access, incident response, NIST 800-171 and CMMC compliance, export-control technical safeguards, AI and data governance, device management, networking, and IT scaling. The role is hands-on and partners closely with engineering, legal, compliance, vendors, and leadership.

Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.

Provides pre-sales technical support and technical account management for Vectra’s AI-driven cybersecurity platform. Responsibilities include customer discovery, product demonstrations, proofs of concept, security architecture guidance, technology reviews, integrations, deployment reviews, and technical relationship development. The role requires expertise in security platforms, networking, cloud security, incident response, attacker progression, and security processes, along with strong communication and large-account management skills. Regional travel is required as needed.

Design and implement security solutions across application, product, infrastructure, enterprise, and observability domains. Conduct threat modeling, embed security into engineering workflows, automate detections and incident response using AI, participate in on-call incident response, and support compliance efforts including SOC 2, ISO 27001, and PCI. Mentor engineers, influence security strategy, and collaborate with internal stakeholders and vendors in a regulated fintech environment.

Supports information security compliance programs, regulatory and framework assessments, risk mitigation, audit preparation, remediation tracking, policy maintenance, and security program improvements. The role coordinates evidence collection, manages risk exceptions and registers, monitors international regulations, supports penetration testing reviews, and maintains incident response and business continuity documentation. It also partners with Legal, auditors, stakeholders, and security leads to strengthen the organization’s security posture and compliance roadmap.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Conduct manual penetration testing, secure code reviews, and SAST triage across web applications, APIs, and AWS infrastructure. Develop AI-assisted security tooling, define testing approaches for LLM applications and agentic systems, and review AI-generated software before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while improving secure SDLC practices.

Owns product management for managed security services onboarding. Translates product vision into engineering plans, prioritizes cross-team backlogs, defines requirements, facilitates project ceremonies, monitors telemetry and operational metrics, and drives scalable self-service onboarding experiences. Partners with Product, Engineering, Customer Success, Operations, and technical support to improve customer adoption, time to value, and long-term success across Arctic Wolf’s product portfolio.

Maintains a safe, secure, and welcoming casino environment by monitoring operations, patrolling gaming and public areas, responding to incidents, enforcing regulations, supporting emergency coordination, protecting money transfers, preparing reports, assisting guests, and promoting responsible gaming and alcohol service.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Designs and implements security solutions across application, infrastructure, enterprise, and observability domains. Responsibilities include threat modeling, integrating security into development workflows, automating detection and response using AI, incident response, regulatory support, mentoring, and shaping security priorities. The role requires collaboration with engineering, product, compliance, and vendors in a regulated fintech environment.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.