Cybersecurity Engineer

Export Development Canada | Exportation et développement Canada

Ingénieur cybersécurité renforçant la posture de sécurité d’EDC, société canadienne de financement du commerce international. Intégration de contrôles, DevSecOps et sécurité de l’IA.

Posted 9/11/2026full-timeOttawa • 🇨🇦 CanadaSeniorLead💰 CA$96,557 - CA$128,742 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity engineering with a focus on application and cloud security, integrating security into the software development life cycle, and utilizing AI and machine learning for security operations. Strong communication skills are essential for translating complex security concepts into business language and collaborating with diverse teams.

Highest-signal resume keywords

Cybersecurity EngineeringCloud Security ExpertiseAI Security ExperienceSecurity Tools ProficiencyCommunication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity EngineeringApplication SecurityCloud SecurityVulnerability ManagementSecurity AutomationThreat ModelingSecurity Architecture ReviewsScripting with PythonScripting with PowerShellScripting with Bash

Soft Skills

Excellent CommunicationCollaborativeCuriousComfortable with AmbiguityIndependent Work

Tools & Technologies

SIEMVulnerability Management ToolsSASTDASTIdentity PlatformsEndpoint Security ToolsCloud Security ToolsAI PlatformsDatabricksSalesforce

Certifications & Qualifications

CISSPCCSPCEHOSCPAzure Security SpecializationMicrosoft Professional Certifications

Industry Keywords

DevSecOpsShift-Left ApproachCanadian ComplianceRegulatory FrameworksAI and Machine Learning Security

Tech Stack

Tools & technologies

AWSAzureFluxGoogle Cloud PlatformPythonServiceNow

About the role

Key responsibilities & impact

Collaborate with the infrastructure, cloud, and application teams to integrate security controls into EDC’s technology stack
Identify security gaps and vulnerabilities, prioritize remediation measures, and develop tactical plans
Design and implement security and automation tools and hardening standards
Contribute to threat modeling, security architecture reviews, and assessments of emerging technologies
Monitor the threat landscape and develop actionable improvements
Act as a security partner to agile and delivery teams throughout design, development, and deployment
Conduct security reviews of project documentation, architecture diagrams, code changes, and configuration decisions
Promote secure-by-default practices, DevSecOps, and a shift-left approach
Design and maintain reusable security standards, guidelines, and templates
Advise engineering and product stakeholders and translate security risks into business language
Assess security risks associated with AI and machine learning workloads
Support EDC’s AI security approach through risk assessments, security reviews, and governance feedback
Use AI and machine learning to improve security operations, including anomaly detection, threat hunting, and alert triage
Explore and evaluate AI-assisted security tools
Collaborate with stakeholders to align security practices with EDC’s strategic objectives and 2030 roadmap
Communicate complex security concepts to technical and non-technical audiences
Contribute to key performance indicators and metrics tracking the progress of the security posture
Contribute to continuous improvement initiatives and the evolution of the security program

Requirements

What you’ll need

Postsecondary degree in computer science, information security, engineering, or a related field, combined with equivalent practical experience
At least 7 years of hands-on experience in cybersecurity engineering, application or cloud security, or a similar technical role
Extensive, demonstrated experience across multiple security domains, such as application, cloud, network, or endpoint security, identity, data protection, or vulnerability management
Expertise in several areas of security and working knowledge of others
Experience integrating security into software development life cycle processes, continuous integration and continuous delivery practices, and agile workflows
Strong cloud security expertise, preferably with Azure; experience with AWS and GCP is also recognized
Hands-on experience with a broad range of security tools, including SIEM, vulnerability management, SAST, DAST, secrets management, identity platforms, endpoint security, and cloud security tools
Knowledge of AI and machine learning security considerations
Experience with AI security, including hands-on work, architecture reviews, governance, risk assessment, proof-of-concept development, or collaboration with AI platform teams
Excellent communication skills and the ability to translate security risks into business language
Collaborative, curious, comfortable with ambiguity, and able to work independently
CISSP, CCSP, CEH, OSCP, Azure Security specialization, Microsoft professional certifications, or equivalent certifications are considered an asset
Experience with AI and machine learning platforms, large language models, or analytics and data science pipelines is considered an asset
Experience with Copilot Studio, Databricks, AI embedded in SaaS, or similar AI services is considered an asset
Knowledge of Salesforce, ServiceNow, and other SaaS security models is considered an asset
Knowledge of Canadian compliance and regulatory frameworks applicable to federal Crown corporations is considered an asset
Experience writing scripts and coding with Python, PowerShell, or Bash is considered an asset
Fluency in both official languages, English and French, is considered an asset
Preference will be given to candidates legally authorized to work in Canada at the time of application
Candidates must meet government security requirements

Benefits

Comp & perks

Performance-based compensation
Various hybrid work options
Three to four weeks of vacation
Holiday closure period
Shorter summer Fridays
Meeting-free Fridays
Ongoing learning opportunities, training programs, and workshops
Language training
Diverse and inclusive workplace
Wellness initiatives
Mental health support
Fitness programs
Volunteer activities and social responsibility programs
Relocation assistance available to eligible candidates