Top Cyber Security Jobs in Ottawa

Perform application security and vulnerability management across web apps, APIs, cloud services and third-party components. Run SAST/DAST/SCA and web scans, coordinate penetration tests, validate and track remediation, and support security operations (EDR/DLP/SIEM/SOAR). Manage security awareness (KnowBe4), assist incident response, tune alerts, and collaborate with engineering, IT, and business stakeholders to reduce risk.

Design, implement, and operate security capabilities across endpoint, cloud, identity, and network environments. Build integrations and automation (scripting/APIs), extend vendor platforms, improve interoperability, monitor and optimize security services, and partner with engineering and IT teams to embed secure, scalable controls that reduce risk.

Lead and improve daily operations of Twilios Security Risk program: maintain risk registers and KRIs, perform qualitative and quantitative risk analyses, build dashboards and predictive models, coordinate remediation with engineering, support audits, and drive automation and AI-enabled risk tooling to scale program impact.

Design and drive security architecture for applications, services, and infrastructure. Partner with engineering and DevOps on secure backend design, cloud and container security, CI/CD hardening, and access controls. Conduct threat modeling, risk assessments, and security reviews; integrate security tooling; enforce secure coding practices; mentor engineers; and stay current on fintech and blockchain threats and compliance standards.

Work on Firefox security architecture and cryptography stack, implement and maintain WebPKI and security-sensitive web APIs, design and ship web platform security features, debug and improve multi-threaded browser performance and memory, collaborate across teams on security initiatives, and contribute to technical design and planning.

Provide information security expertise for government IT projects: perform on‑premise and cloud security assessments, identify risks and vulnerabilities, conduct privacy impact assessments, define security requirements, develop enterprise security documentation, support vulnerability testing and disaster recovery planning, and advise project teams on security and compliance aligned with NIST.

Own and scale Mozilla's web bug bounty program; triage and validate reports; drive end-to-end remediation with engineering teams; perform targeted code reviews (JavaScript, Python); collaborate with SIRT on incidents and post-incident reviews; build tooling and metrics to improve triage, automation, and program insights.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

First dedicated security hire responsible for building and operating security foundations across infrastructure and software. Own vulnerability management and incident response, implement IAM, network segmentation, secrets management, and secure CI/CD patterns, support compliance (SOC 2/ISO 27001), manage vendors, and drive security adoption across engineering.

Design and implement product-level authentication, authorization, multi-tenant isolation, and privacy-preserving data lifecycles. Ship security-sensitive changes end-to-end, own application and API security, threat modeling, telemetry for security events, and integrate conservative partner security controls.

Harden low-level platform layers across firmware, bootloader, Linux kernel, and hardware roots of trust. Design secure/measured boot and attestation, review kernel modules/drivers for memory safety and privilege issues, build kernel telemetry (eBPF), and drive fleet-wide vulnerability response and remediation.

Lead architecture and evolution of enterprise, data center, and cloud networks for hyperscale AI; design secure, high-performance fabrics (spine/leaf, RDMA); build AI-agent review frameworks; implement segmented zero-trust network designs; set resiliency, observability, and capacity standards; mentor global engineers and guide cross-functional initiatives.

Join IT & Security to secure and scale enterprise IT, cloud, network, and infrastructure; build automation and tooling; support detection, response, and vulnerability management; improve identity, endpoint, and systems security; and partner cross-functionally to develop processes that enable secure, reliable, and scalable AI workloads.

Build and maintain customer-facing AI cloud frontends (inference, training, admin consoles, and APIs). Design responsive, high-reliability interfaces to handle high traffic, using modern web frameworks and best practices. Collaborate on architecture, ensure production-grade quality, and thrive in ambiguous, fast-changing environments while sharing knowledge and communicating clearly.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Lead and manage SOC 1/SOC 2 examinations and SOX 404 IT control activities; assess ITGCs/ITACs, perform gap and impact assessments, drive remediation, collect auditor-ready evidence, and partner cross-functionally to design scalable controls for cloud and hybrid environments.

Join a security research team to develop analysis tools, review sandbox/VM and network modules, discover vulnerabilities and create PoC exploits for distributed systems, and publish findings. Research areas include malware analysis, vulnerability detection, network anomaly detection, mobile app analysis, reverse engineering, and fraud detection.

Serve as a strategic, hands-on HR business partner for technical and business teams. Advise leaders on org design, coach managers through employee relations and performance issues, lead talent and compensation cycles, execute reorganizations, improve people programs and processes, and use workforce data to surface trends and risks. Support cross-functional coordination with People Operations, Recruiting, Finance, and Legal.

Hands-on Staff Security Engineer to build and operate DevSecOps capabilities: automate security controls, harden AWS/cloud and CI/CD, improve supply-chain security, build detection/response tooling, partner with engineering for secure design, and lead incident response and compliance automation.

Conduct outbound prospecting via calls, email, and LinkedIn to identify and qualify leads, uncover customer needs, suggest solutions, and hit quota. Partner with sales teams, manage territory activity, and become a product subject-matter expert to drive pipeline growth.

Sell Abnormal AI security SaaS to enterprise accounts in a defined Toronto territory: prospect, build pipeline, manage deals from discovery to close, ensure renewals/expansions with Customer Success, maintain sales data in systems, and share customer insights with product and internal teams.

Lead integrated financial modeling, scenario analysis, and strategic transaction evaluation to guide investments, financings, acquisitions, and long-range planning. Partner with executives, accounting, and operations to improve forecasting, capital-structure analysis, and investor/board materials. Drive faster, more accurate decision-support and scalable finance infrastructure in a high-growth payments business.

Manage a portfolio of enterprise customers across North America, driving renewals, retention, and account growth. Build executive relationships, identify upsell/cross-sell opportunities, lead commercial negotiations, and collaborate with cross-functional teams to ensure customer success and predictable revenue. Maintain accurate forecasts in Salesforce and meet renewal and expansion targets.