Top Cyber Security Jobs in Ottawa

Lead security architecture, engineering, and advisory activities for defence/government IT environments. Design secure architectures, assess security technologies and protocols, perform risk analyses, produce technical reports and advisories, conduct data classification, develop training, and brief senior stakeholders while applying government security frameworks and best practices.

Perform physical security assessments (FSAs, TRAs, SDBs), author security plans, SOPs and CONOPS, recommend mitigations, and advise clients on improving facility, personnel, and asset protection across Canadian government environments.

Provide industrial physical security consulting across project phases—assess threats/vulnerabilities, author SIPs/SOPs/CONOPS, produce TRAs and SDBs, review construction/security designs, conduct audits, advise stakeholders, and ensure security governance and information protection for high-security/defense projects across Canada.

Builds secure, automated identity and access management tooling, including access request workflows, self-service APIs and interfaces, user lifecycle pipelines, audit logging, and access review systems. Integrates HR systems, identity providers such as Okta, and security platforms while collaborating with Security Engineering, IT, and platform teams to improve scalable access provisioning, deprovisioning, compliance, and developer experience.

Join the founding team to spearhead sales initiatives, develop content strategies, and enhance customer relationships in blockchain security. Collaborate closely with the CEO to achieve product-market fit and build a strong team culture.

Develop and close enterprise sales opportunities for VGS payment tokenization solutions. Build relationships with executives, technical stakeholders, prospects, and channel partners; manage inbound and outbound activity across the full sales cycle; identify upsell and cross-sell opportunities; create strategic outreach plans; and collaborate with Product and Engineering on business strategy.

This role requires shaping technical direction, leveraging AI tools for production systems, and making crucial decisions to align product intent with engineering realities.

Leads a distributed team of security and infrastructure engineers responsible for securing NVIDIA’s large-scale DGX Cloud GPU fleet. Sets technical direction for security control planes and foundational services, oversees hiring and talent development, drives measurable risk reduction, and ensures operationally ready engineering delivery. The role requires cross-functional influence across platform, SRE, networking, and security teams, along with expertise in cloud-native architecture, Kubernetes, identity and access, policy enforcement, and vulnerability management.

Design and build foundational security services for NVIDIA DGX Cloud’s large-scale GPU infrastructure. Develop automated Infrastructure-as-Code and Policy-as-Code enforcement, orchestration guardrails, identity and secrets services, scanning APIs, and security response systems. Integrate security products into API-first platforms and CI/CD workflows, conduct threat modeling, and secure distributed cloud-native systems. Collaborate with infrastructure, security, and product engineering teams across omni-cloud and on-premise environments.

Support multinational security operations in high-threat environments by securing checkpoints, conducting convoy operations, protecting humanitarian efforts, delivering relief supplies, and coordinating with NGOs, government agencies, and community leaders. The role requires combat experience, weapons proficiency, active-duty military experience, and the ability to operate alongside multinational teams in conflict zones.

The Sr. Infrastructure Engineer will architect and maintain scalable infrastructure, lead incident management, improve operational processes, and mentor junior engineers.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for vulnerabilities, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security analysis, and serving as an infrastructure-level subject matter expert during security incidents.

Design, build, and optimize scalable backend systems and APIs; collaborate on architecture; troubleshoot production issues; lead code reviews; mentor junior engineers; improve reliability, performance, and security of the platform.

Enforce the Ship Security Plan and support the Ship Security Officer: conduct security assessments and inspections, manage access control and screening (X-ray, metal detectors), lead security team and drills, investigate incidents, maintain security equipment and filing, coordinate with port authorities, and respond as first responder/active assailant team leader.

Work hands-on to harden endpoints, identities, and data protection: manage EDR and CIS baselines, perform incident response and on-call duties, improve identity and access controls (Okta, FIDO2), tune SIEM detections (Datadog), and build AI/automation to reduce toil while partnering cross-functionally with IT and engineering.

Design, build, and scale security infrastructure across systems, networks, endpoints, and products. Own security architecture, detection/response, vulnerability and risk management, and security policies. Integrate security into the SDLC, partner with engineering, run incident response and monitoring, lead security education, and temporarily own IT infrastructure.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Senior Software Security Engineer responsible for threat modeling, security architecture reviews, code and penetration testing, integrating SAST/DAST/SCA into CI/CD, triaging vulnerabilities, driving secure SDLC/DevSecOps practices, incident response, and ensuring compliance with industry security standards.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Protect company employees, assets and customer freight by investigating theft and security incidents, conducting audits and inspections, implementing preventive security measures and procedures, ensuring cross-border compliance (CTPAT/PIP/AEO), delivering training, and collaborating with operations to reduce losses and maintain security standards across the regional network.

Work with the security team to triage vulnerabilities, operate vulnerability management, audit and refine IAM and access controls, improve CI/CD security checks, tune and automate SIEM alerting and log ingest, support security exercises, research security tools, and document findings.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Design and drive security architecture for applications, services, and infrastructure. Partner with engineering and DevOps on secure backend design, cloud and container security, CI/CD hardening, and access controls. Conduct threat modeling, risk assessments, and security reviews; integrate security tooling; enforce secure coding practices; mentor engineers; and stay current on fintech and blockchain threats and compliance standards.