Top Cyber Security Jobs in Montreal

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

The Senior Security Engineer I will build and maintain core security infrastructure, collaborate with global teams, mentor junior engineers, and drive security initiatives.

Leads CBC/Radio-Canada’s security architecture vision and integrates security requirements across enterprise, software, platform, infrastructure, and major projects. Develops security policies, standards, reference architectures, and zero-trust guardrails; assesses cloud, applications, data centers, and technology initiatives for compliance. Advises senior leaders on cyber risks, represents the organization in industry committees, evaluates emerging technologies, and mentors architects and analysts. The role requires strong stakeholder influence, technical expertise, bilingual English-French communication, and strategic alignment of cybersecurity with business objectives.

Lead PAM architecture and engineering for IDIRA/CyberArk Privileged Cloud, including custom CPM plugins, PSM connectors, MFA integrations, JIT access, cloud administration, and AI-agent credential vaulting. Establish onboarding standards, security controls, automation, auditability, and risk metrics across AWS, Azure, and GCP. Troubleshoot complex platform issues, remediate privileged-access risks, guide application teams, and support incident response involving compromised privileged accounts.

Own security for cloud and ML infrastructure, including tenant isolation, GPU cluster security, model protection, vulnerability management, network segmentation, monitoring, access governance, and credential management. Lead infrastructure security projects and establish technical standards and guardrails in partnership with Security, DevOps, Engineering, IT, and ML teams. The role also supports incident response, CSPM, sandboxing, container isolation, and SOC 2 readiness.

Own and improve corporate security across identity and access management, endpoint protection, SaaS applications, Zero Trust, automation, detection, and incident response. Implement Entra ID controls, SSO, SCIM, MFA, RBAC, JML workflows, Intune policies, EDR, and security baselines. Automate security processes with Python or JavaScript, investigate alerts, remediate incidents, and partner with IT, Security, Engineering, and business teams in a fast-moving startup environment.

Designs and maintains secure cloud, on-premises, and containerized environments while strengthening cyber defense detection engineering. Responsibilities include log ingestion and platform maintenance, monitoring and investigating alerts across SIEM, EDR, and XDR tools, developing and tuning detection rules and threat signatures, reducing false positives, and identifying mitigation and response opportunities. The role administers Microsoft Sentinel, CrowdStrike, Microsoft Purview, and Jira, and collaborates with development, infrastructure, and security teams.

Serves as the primary technical contact for prospective security customers during sales engagements. Leads technical presentations, demonstrations, workshops, architecture sessions, proofs of concept, and competitive positioning. Develops security strategies, recommendations, and technical success plans while guiding customer technical decisions around Microsoft Security, XDR, SIEM, XSPM, Zero Trust, and multicloud solutions. Collaborates with sales teams, partners, and internal stakeholders throughout the sales cycle, maintains technical expertise, and supports security business growth.

Develop low-level firmware for secure enclaves in custom ASICs supporting secure boot, attestation, root of trust, provisioning, secure updates, recovery, telemetry, tamper monitoring, and debugging. Collaborate with ASIC, hardware, security, software, and systems teams on interfaces and requirements. Support pre-silicon validation, FPGA and simulation development, silicon bring-up, production deployment, testing, code reviews, and documentation.

Build IAM workflows, self-service APIs, command-line tools, and lightweight interfaces for access provisioning and deprovisioning. Automate employee lifecycle processes through HR and identity-provider integrations, create audit logging and access-review systems, and integrate security platforms across corporate and R&D environments. Collaborate with Security Engineering, IT, and platform teams to deliver secure, scalable, developer-friendly access management.

Builds secure, automated identity and access management tooling, including access request workflows, self-service APIs and interfaces, user lifecycle pipelines, audit logging, and access review systems. Integrates HR systems, identity providers such as Okta, and security platforms while collaborating with Security Engineering, IT, and platform teams to improve scalable access provisioning, deprovisioning, compliance, and developer experience.

Lead security engineering strategy and technical roadmaps, advise on complex security decisions, drive cross-team collaboration, mentor security specialists, and evolve security controls by monitoring threats and industry trends to ensure secure-by-design delivery at scale.

Perform global offensive security testing and red-team operations to identify and exploit vulnerabilities, evaluate security controls and incident response, produce actionable findings and metrics, and work with regional teams to drive remediation and improve enterprise security posture.

Leads a distributed team of security and infrastructure engineers responsible for securing NVIDIA’s large-scale DGX Cloud GPU fleet. Sets technical direction for security control planes and foundational services, oversees hiring and talent development, drives measurable risk reduction, and ensures operationally ready engineering delivery. The role requires cross-functional influence across platform, SRE, networking, and security teams, along with expertise in cloud-native architecture, Kubernetes, identity and access, policy enforcement, and vulnerability management.

Design and build foundational security services for NVIDIA DGX Cloud’s large-scale GPU infrastructure. Develop automated Infrastructure-as-Code and Policy-as-Code enforcement, orchestration guardrails, identity and secrets services, scanning APIs, and security response systems. Integrate security products into API-first platforms and CI/CD workflows, conduct threat modeling, and secure distributed cloud-native systems. Collaborate with infrastructure, security, and product engineering teams across omni-cloud and on-premise environments.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for vulnerabilities, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security analysis, and serving as an infrastructure-level subject matter expert during security incidents.

Design, build, and scale security infrastructure across systems, networks, endpoints, and products. Own security architecture, detection/response, vulnerability and risk management, and security policies. Integrate security into the SDLC, partner with engineering, run incident response and monitoring, lead security education, and temporarily own IT infrastructure.

Serve as the customer-facing security lead for Akamai product integrations, drive account team delivery and customer success, identify service improvements, manage technical projects and priorities, and communicate with internal and external stakeholders to ensure high-quality integration and support.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Design, implement, and operate security capabilities across endpoint, cloud, identity, and network environments. Build integrations and automation (scripting/APIs), extend vendor platforms, improve interoperability, monitor and optimize security services, and partner with engineering and IT teams to embed secure, scalable controls that reduce risk.