Top Cyber Security Jobs in Ottawa

Design, build, and scale security infrastructure across systems, networks, endpoints, and products. Own security architecture, detection/response, vulnerability and risk management, and security policies. Integrate security into the SDLC, partner with engineering, run incident response and monitoring, lead security education, and temporarily own IT infrastructure.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Deployable Emergency Response Team member providing humanitarian access, safety and security expertise during emergencies (65% deployment). Lead risk analysis, access and security strategies, stakeholder negotiations, incident reporting and communications setup. Deliver trainings, support incident management, advise program design and ensure handover and partner capacity-building.

Supervise event security staff at venue(s), conduct briefings and post checks, investigate incidents and complete reports, train and mentor officers, enforce event policies and emergency procedures, resolve escalations and coordinate with Security Director/Manager to ensure guest, employee, and asset safety.

Senior Software Security Engineer responsible for threat modeling, security architecture reviews, code and penetration testing, integrating SAST/DAST/SCA into CI/CD, triaging vulnerabilities, driving secure SDLC/DevSecOps practices, incident response, and ensuring compliance with industry security standards.

Lead and own the information security program and security engineering at NEAR Foundation. Drive SOC 2 Type 2 and ISO 27001 readiness, run logging/monitoring/incident response, manage vulnerability and third-party risk, harden identity/access/endpoint stacks, automate security and compliance across SaaS, and advise on tooling and cloud security (AWS/GCP).

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Protect company employees, assets and customer freight by investigating theft and security incidents, conducting audits and inspections, implementing preventive security measures and procedures, ensuring cross-border compliance (CTPAT/PIP/AEO), delivering training, and collaborating with operations to reduce losses and maintain security standards across the regional network.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Work with the security team to triage vulnerabilities, operate vulnerability management, audit and refine IAM and access controls, improve CI/CD security checks, tune and automate SIEM alerting and log ingest, support security exercises, research security tools, and document findings.

Customer-facing Cloud Solution Architect specializing in data security on the Microsoft platform. Advise customers on data protection, insider risk, DLP, and Zero Trust; design end-to-end solutions, run architecture sessions, deliver technical presentations/demos, drive adoption and operational health, and collaborate with Microsoft engineering, partners, and stakeholders.

Perform non-disruptive OT security assessments (tabletop and targeted testing) across ICS/SCADA environments, identify operationally relevant risk, advise clients on remediation and program improvements, and contribute to Packetlabs' OT methodology and team knowledge.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Lead implementations of Proofpoint Information Protection to meet information protection and compliance objectives. Engage enterprise customers, configure Email/Cloud/Endpoint DLP, conduct DLP and data exfiltration investigations, build playbooks, mentor team members, and document best practices while coordinating cross-functional teams to ensure successful project outcomes.

Design and implement security controls across cloud, OS, Kubernetes, networks, and CI/CD. Audit infrastructure, perform threat modeling, remediate vulnerabilities, and write software for security features and defenses.

Design and implement security and privacy features across Tailscale's codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive mitigations to resolution, and spend significant time writing secure software (50%+ coding). Collaborate with engineering teams to promote secure coding and provide guidance and training.

Lead full‑stack development and reliability improvements for the Firefox Add‑ons ecosystem, building features, automated moderation pipelines, reviewer tools, and observability. Improve platform reliability, respond to incidents, and help keep the ecosystem safe and trustworthy. Collaborate across design, product, QA, and community contributors and contribute openly through PRs and code reviews.

Perform information security and risk activities including implementing and enforcing security controls, incident response, threat management, vulnerability scanning, malware management, intrusion detection, risk assessments, and backup/disaster recovery planning. Work on moderate-scope projects with general guidance and apply judgment within defined parameters.

Design and run automation-driven, AI-agent-assisted attack campaigns and red-team simulations against Wealthsimple products and infrastructure; build and improve automated testing pipelines, AI agents, and tooling; triage AI-generated findings into high-signal vulnerabilities; collaborate with platform engineers and AppSec to integrate adversarial testing into the SDLC and support remediation.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001, SOC 2), support audit execution and evidence collection, manage policy lifecycle, track remediation and internal audits, and partner with cross-functional teams to translate compliance requirements into practical controls and processes.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Partner with engineering and product teams to design, ship, and integrate scalable security solutions. Lead security reviews, threat modeling, and technical roadmaps, use metrics to drive risk reduction, mentor engineering teams, and leverage LLMs, CI/CD, and AI tooling to improve security at scale.