Top Cyber Security Jobs in Calgary

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to stakeholders, build investigation tools and automated workflows, and improve security operations processes. The role requires Python scripting, SIEM experience, cloud security knowledge across AWS and GCP, and forensic analysis across macOS, Windows, and Linux.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the detection lifecycle, advance detection-as-code with Git, testing, CI/CD, and observability, and improve data ingestion and enrichment. Evaluate AI-assisted security capabilities, translate threat intelligence into detections, and partner with Security Operations during investigations and incident exercises. The role requires strong Python and SQL skills, SIEM expertise, AWS and Linux knowledge, and independent project leadership.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

As a Senior Solutions Engineer, you'll engage with enterprise customers, addressing technical sales, creating presentations, conducting demos, and leading proof of concepts for Cloudflare solutions.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Lead strategic network and security infrastructure programs: develop capability roadmaps, define security standards, prioritize initiatives, align stakeholders, deliver capability frameworks and communications, and drive technical decisions to improve enterprise cyber posture.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Conduct manual penetration testing, secure code reviews, and SAST triage across web applications, APIs, and AWS infrastructure. Develop AI-assisted security tooling, define testing approaches for LLM applications and agentic systems, and review AI-generated software before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while improving secure SDLC practices.

Lead detection and incident response across corporate security systems. Own investigations end-to-end, tune and automate detection (DLP, EDR, SIEM, phishing), produce runbooks and remediations, coach junior analysts, and partner cross-functionally to improve controls, compliance evidence, and AI-related security tooling.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Operate corporate security tools and processes, including monitoring DLP alerts, reviewing EDR detections, triaging incidents, conducting investigations, and running phishing simulations. Maintain runbooks, support SOC 2 and ISO 27001 evidence collection, improve security tooling, and develop automation for remediation and unauthorized data-movement detection. The role collaborates across IT, application security, compliance, and people teams while supporting Clio’s security culture.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Leads global and site security programs across facilities, offices, and laboratories. Responsibilities include security operations, risk and vulnerability assessments, crisis response, investigations, threat awareness training, vendor and contract coordination, governance, technology roadmaps, reporting, and continuous improvement. The role manages security budgets, supports law-enforcement relationships, advises executive leadership, and maintains 24/7 readiness for security incidents and emergencies.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Assess web, API, identity, AWS, and integration security controls for a bilingual nonprofit platform. Identify and report security and privacy risks, conduct threat modeling, scope and coordinate security testing, and verify remediation. Evaluate least-privilege access, encryption, secrets management, logging, consent, retention, data residency, and youth-data protections under Canadian privacy requirements. Collaborate with delivery teams and client stakeholders while documenting findings and recommendations. Canadian or U.S.-based contractors must work during Eastern Time business hours.

Manages global corporate security activities, including access control, CCTV and alarm systems, security vendor relationships, employee training, security reporting, business resiliency planning, facility surveillance, and crisis response. The role applies security standards, resolves technical and operational issues, and supports projects of moderate scope and complexity.

Lead global SCA and SAST strategy and tooling, integrate static and open-source scanning into CI/CD pipelines, reduce false positives, perform threat modeling and architecture reviews, mentor teams, and drive developer-first application security across diverse tech stacks.

Drive strategy, discovery, requirements, prioritization, and roadmaps for payment messaging products. Lead complex multinational implementations modernizing banking and acquiring systems. Design configurable, developer-friendly interfaces for interpreting ISO 8583, ISO 20022, and related protocols. Partner with banks, processors, customers, engineering, implementation, executives, and go-to-market teams while integrating with existing platforms and legacy technologies.

Lead architecture and development of secure, high-scale Python and FastAPI payment infrastructure for AI-agent transactions. Design APIs for tokenization, mandates, authentication, attestation, and cryptogram workflows; own security, reliability, observability, testing, Kubernetes provisioning, and production operations. Drive technical initiatives, design reviews, and cross-functional collaboration with product, security, infrastructure, platform, and card-network partners while applying AI-assisted engineering practices.