Top Cyber Security Jobs in Calgary

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Work with the security team to triage vulnerabilities, operate vulnerability management, audit and refine IAM and access controls, improve CI/CD security checks, tune and automate SIEM alerting and log ingest, support security exercises, research security tools, and document findings.

Serve as the customer-facing security lead for Akamai product integrations, drive account team delivery and customer success, identify service improvements, manage technical projects and priorities, and communicate with internal and external stakeholders to ensure high-quality integration and support.

Perform non-disruptive OT security assessments (tabletop and targeted testing) across ICS/SCADA environments, identify operationally relevant risk, advise clients on remediation and program improvements, and contribute to Packetlabs' OT methodology and team knowledge.

Define, govern, and maintain global security architecture spanning people, processes, data, and technology. Lead cloud security strategy for GCP and Azure migrations, embed security into CI/CD and containerization, develop guardrails for Generative AI/LLMs, conduct architecture reviews and assurance, implement security tools, produce technical design documentation, and ensure policies and controls align with risk tolerance and compliance frameworks.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Design and implement security and privacy features across Tailscale's codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive mitigations to resolution, and spend significant time writing secure software (50%+ coding). Collaborate with engineering teams to promote secure coding and provide guidance and training.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001, SOC 2), support audit execution and evidence collection, manage policy lifecycle, track remediation and internal audits, and partner with cross-functional teams to translate compliance requirements into practical controls and processes.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Perform application security and vulnerability management across web apps, APIs, cloud services and third-party components. Run SAST/DAST/SCA and web scans, coordinate penetration tests, validate and track remediation, and support security operations (EDR/DLP/SIEM/SOAR). Manage security awareness (KnowBe4), assist incident response, tune alerts, and collaborate with engineering, IT, and business stakeholders to reduce risk.

Design, implement, and operate security capabilities across endpoint, cloud, identity, and network environments. Build integrations and automation (scripting/APIs), extend vendor platforms, improve interoperability, monitor and optimize security services, and partner with engineering and IT teams to embed secure, scalable controls that reduce risk.

Lead and improve daily operations of Twilios Security Risk program: maintain risk registers and KRIs, perform qualitative and quantitative risk analyses, build dashboards and predictive models, coordinate remediation with engineering, support audits, and drive automation and AI-enabled risk tooling to scale program impact.

Design and drive security architecture for applications, services, and infrastructure. Partner with engineering and DevOps on secure backend design, cloud and container security, CI/CD hardening, and access controls. Conduct threat modeling, risk assessments, and security reviews; integrate security tooling; enforce secure coding practices; mentor engineers; and stay current on fintech and blockchain threats and compliance standards.

Provide information security expertise for government IT projects: perform on‑premise and cloud security assessments, identify risks and vulnerabilities, conduct privacy impact assessments, define security requirements, develop enterprise security documentation, support vulnerability testing and disaster recovery planning, and advise project teams on security and compliance aligned with NIST.

Own and scale Mozilla's web bug bounty program; triage and validate reports; drive end-to-end remediation with engineering teams; perform targeted code reviews (JavaScript, Python); collaborate with SIRT on incidents and post-incident reviews; build tooling and metrics to improve triage, automation, and program insights.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

Design and implement product-level authentication, authorization, multi-tenant isolation, and privacy-preserving data lifecycles. Ship security-sensitive changes end-to-end, own application and API security, threat modeling, telemetry for security events, and integrate conservative partner security controls.

Lead architecture and evolution of enterprise, data center, and cloud networks for hyperscale AI; design secure, high-performance fabrics (spine/leaf, RDMA); build AI-agent review frameworks; implement segmented zero-trust network designs; set resiliency, observability, and capacity standards; mentor global engineers and guide cross-functional initiatives.

Join IT & Security to secure and scale enterprise IT, cloud, network, and infrastructure; build automation and tooling; support detection, response, and vulnerability management; improve identity, endpoint, and systems security; and partner cross-functionally to develop processes that enable secure, reliable, and scalable AI workloads.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Lead and manage SOC 1/SOC 2 examinations and SOX 404 IT control activities; assess ITGCs/ITACs, perform gap and impact assessments, drive remediation, collect auditor-ready evidence, and partner cross-functionally to design scalable controls for cloud and hybrid environments.

Lead strategy and roadmap for bot management and application security products. Collaborate with engineering, sales, and marketing; engage customers; drive detection, architecture, and platform decisions; deliver scalable, high‑performance detection and reporting features; coordinate cross-team priorities and launch large-scale initiatives while monitoring market and competitive trends.