Find work in Canada.

A simpler way to find your next job.

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 12 mins ago
BG
Building Operator
BC General Employees' Union (BCGEU)
Burnaby, BC
- Full-time
Act as the designated power engineer for assigned sites, where designated by BCGEU, in accordance with applicable certification and regulatory requirements.
Added 13 mins ago
B
Senior Director Software Engineer
Broadridge
Markham, ON
- Full-time
…cross-functional team and deliver resilient, automated systems that support our strategic…
Added 41 mins ago
HA
Software Engineer II - Digital Thread & Analytics
Honeywell Aerospace
Mississauga, ON
- Full-time
As a Software Engineer II focused on Digital Thread & Analytics, you will develop innovative integration, impact analysis, reporting and visualization solutions that transform complex…
Added 43 mins ago
WE
Project Assistant
Williams Engineering Canada Inc
Calgary, AB
- Full-time
Knowing what we do reaches beyond a single project, we believe it's not only our responsibility but our core purpose to engineer cities that are safe, inclusive, and resilient.
Added 1 hour ago
PC
Senior Cloud Platform Lead, Senior Manager
PwC Canada
Toronto, ON
- Full-time
At PwC, our people in infrastructure focus on designing and implementing robust, secure IT systems that support business operations. They enable the smooth functioning of networks, servers,…
Added 1 hour ago
AS
Sr. Instrumentation Engineer
Aker Solutions
St. John's, NL
- Full-time
Our team in St. John's, NL is seeking a Senior Instrumentation Engineer to support our onshore Engineering group!
Added 1 hour ago
PC
Senior Cloud Platform Lead, Senior Manager
PwC Canada
Toronto, ON
- Full-time
At PwC, our people in infrastructure focus on designing and implementing robust, secure IT systems that support business operations. They enable the smooth functioning of networks, servers,…
Added 1 hour ago
PC
Cloud Infrastructure Engineer, Senior Associate
PwC Canada
Toronto, ON
- Full-time
…handle data governance, quality control, and data integration to support business operations. Those in data infrastructure at PwC focus on designing and implementing robust and scalable…
Added 1 hour ago
L
Cybersecurity Engineer - IAM
lululemon
Vancouver, BC
- Full-time
As a Cybersecurity Engineer, you will own security engineering for specific systems and platforms, designing and implementing security controls that balance protection, performance, and…
Added 1 hour ago
P
Senior Manager – Studies & Projects
Palaris
Toronto, ON
- Full-time
Support business development, proposal preparation and project scoping.
Added 1 hour ago
TS
Intermediate/Senior Electrical Engineer (Grande Prairie)
Tetranex Solutions Inc.
Grande Prairie, AB
- Full-time
Tetranex is currently seeking a full-time (Employee or contractor) Intermediate/Senior Electrical Engineer to join our team in Grande Prairie, Alberta. This is an exciting opportunity to…
Added 1 hour ago
R
Software Engineer
Rivian
Vancouver, BC
- Full-time
…impact on the world. If you are a talented and driven software engineer looking to make a difference, we want to hear from…
Added 1 hour ago
PC
Senior Cloud Platform Lead, Senior Manager
PwC Canada
Ottawa, ON
- Full-time
At PwC, our people in infrastructure focus on designing and implementing robust, secure IT systems that support business operations. They enable the smooth functioning of networks, servers,…
Added 1 hour ago
PC
Senior Cloud Platform Lead, Senior Manager
PwC Canada
Ottawa, ON
- Full-time
At PwC, our people in infrastructure focus on designing and implementing robust, secure IT systems that support business operations. They enable the smooth functioning of networks, servers,…
Added 1 hour ago
PC
Cloud Infrastructure Engineer, Senior Associate
PwC Canada
Ottawa, ON
- Full-time
…handle data governance, quality control, and data integration to support business operations. Those in data infrastructure at PwC focus on designing and implementing robust and scalable…
Added 1 hour ago
A
Ingénieur Assurance Qualité
Actalent
MB · Saint-Laurent, MB
- $40 to $60 CAD / hour
- Contract
We are seeking a Quality Assurance Engineer who will be responsible for evaluating and managing supplier quality systems. The role involves maintaining and improving processes for the…
Added 1 hour ago
A
Ingénieur Qualité Fournisseurs / Supplier Quality Engineer
Actalent
MB · Saint-Laurent, MB
- $40 to $60 CAD / hour
- Contract
We are seeking a Quality Assurance Engineer who will be responsible for evaluating and managing supplier quality systems. The role involves maintaining and improving processes for the…
Added 2 hours ago
HT
Product Development Engineer
Husky Technologies
Bolton, ON
- Full-time
…attracted to bold goals, believe in uncompromising honesty, support mutual respect, care about environmental responsibility, have a passion for excellence and a desire to make a positive…
Added 2 hours ago
L
Senior BI Platform Operations Engineer
Luxoft
Toronto, ON
- Full-time
We are looking for a hands-on BI Platform Operations Engineer to provide production operational support, administration, maintenance, and technical troubleshooting for our enterprise…
Added 2 hours ago
FG
Junior Software Engineer
FDM Group
Halifax, NS
- Full-time
Not just another entry level career opportunity: receive coaching, mentorship, and support at every step of your career journey. We invest in you so you can thrive and succeed.
Added 2 hours ago
FG
Production Support Engineer
FDM Group
Halifax, NS
- Full-time
Not just another entry level career opportunity: receive coaching, mentorship, and support at every step of your career journey. We invest in you so you can thrive and succeed.
Added 2 hours ago
S
Engineer, Facility Integrity & Reliability
SaskEnergy
Regina, SK · Saskatoon, SK
- Full-time
SaskEnergy is seeking a qualified and motivated individual to join our team. The Engineer, Facility Integrity & Reliability will optimize the life cycle of the Corporation’s assets to…
Added 2 hours ago
CN
Asset Integrity Lead Engineer
Canadian Natural
Fort McMurray, AB
- Full-time
…292,500 bbls/day of synthetic crude oil. The Asset Integrity Lead Engineer for Bitumen Production, is a key member of the Asset Integrity Leadership Team and is responsible for providing…
Added 2 hours ago
SL
Senior Software Engineer, Operations
Sun Life
Toronto, ON · Waterloo, ON · Sun Life Waterloo King
- Full-time
We are looking for a highly motivated Senior Software Engineer with at least 10 years of Java application support, analysis, and development experience. The successful candidate will have…
Added 2 hours ago
IM
AWS Solutions/Services Architect
Ingram Micro
Montreal, QC · Mississauga, ON · ON · Canada - Ontario - Corporate
- Full-time
Evaluate, recommend, and integrate appropriate technologies and solutions to support client and organizational goals.

MATS Research

Cybersecurity Engineer (Research Infrastructure)

Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Working hours: 40 hours per week
Posting language: English
Posted: Oct 21, 2026

Original job description

About The Organization

MATS finds and trains talented individuals for what we see as the world's most urgent and talent-constrained problem: reducing risks from unaligned artificial intelligence. We believe ambitious researchers from a variety of backgrounds have the potential to meaningfully contribute to alignment, control, security, and governance research. Through our research fellowship, we provide mentorship, training, professional network, and financial support to accelerate their careers and increase their impact.

Since 2021, we have trained over 630 researchers. 75% of pre-2026 fellows continue to work in AI alignment. 10% have co-founded organizations. Our fellows have produced 215+ research papers with 17,000+ citations. And we are just getting started: in the coming year we will expand our program to support even more researchers.

About The Role

You are the security architect for our research pipeline. You will define how we securely conduct research across our compute cluster and cloud environments, partnering closely with our compute team and engineers to make CI/CD, automated research agents, and large-scale compute secure by default. You will build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, model exfiltration, or lateral movement between research environments.

We think about security in two closely related areas. The first is research and infrastructure security - the machine-operational attack surface: the compute cluster, CI/CD pipelines, cloud infrastructure, and model artefacts and pipelines, including potentially dual-use processes and artefacts. The second is IT security - the human-operational attack surface of accounts, devices, email, and vendors. This role focuses on the former. We grow the security team one hire at a time. Depending on hiring order, your initial responsibilities may span both areas, biased toward the research infrastructure side, until a second engineer joins.

Good security here is not a brake. It is what lets us say "yes, safely" to ambitious research, and what makes deeper lab partnerships possible. You will be working at the frontier of how automated alignment research is actually done - building the security primitives for a new way of doing science, where humans and machines collaborate on the most important problem of the 21st century.

What You'll Do

Harden DevSecOps and CI/CD. Build security guardrails directly into our pipelines so that every deployment (manual or agent-driven) is automatically scanned, verified, and compliant. Establish workflows where agents can test their own code and infrastructure changes against security policies before reaching production. Lead the implementation of "compliance as code," automating the auditing and enforcement of security configurations across our AWS, GCP, and neocloud footprints in Terraform. Establish and harden the source-control environment for research code (e.g. GitHub): secret scanning, dependency and code scanning, and branch protections. Issue short-lived cloud credentials from CI rather than long-lived keys.
Secure the software supply chain. In an environment that relies heavily on automated coding agents, build systems that establish the provenance of code and dependencies: robust signing, SBOM generation (Sigstore, cosign), dependency and container scanning (Snyk, Trivy), and automated vulnerability management.
Define agent sandboxing and least-privilege execution. Set and enforce the security models for our research agents. Determine what an agent can compile, deploy, or call from inside the cluster, ensuring agents hold only the access required to run experiments while remaining isolated from sensitive IP and credentials.
Own multi-cloud and cluster security. Manage the security architecture for our high-compute research environments: consistent zero-trust network segmentation, role-based access control, FIDO, and cluster identity management across cloud providers and the cluster including the access model across the fellow cohort lifecycle (how cluster access is granted, reviewed, and reliably revoked at cohort end), using policy-as-code (OPA) where it fits. As MATS consolidates model and compute access across many providers into a unified layer, own its security design.
Harden the research cluster. Own Linux OS and node security across our SLURM cluster: kernel/CVE patching, the privileged-access (sudoers/PAM) model, multi-tenant isolation, and host-based detection.
Protect research data and model weights. Develop and maintain the data-handling and classification protocols needed for pre-publication research and potentially sensitive model weights, including how weights are stored, accessed, and moved.
Secure our research-data infrastructure. MATS is building infrastructure to capture, store, and share research and experiment data, including agent-trajectory data. Design the controls that keep it safe end-to-end: data classification and provenance, access control on shared datasets, privacy and consent handling for opt-in contributors, and secure adoption of tooling built with external research partners.
Monitoring and detection. Audit-log ingestion to our SIEM, anomaly detection on identity and workload behaviour, and egress monitoring across the cluster and the unified layer, so misuse or exfiltration attempts surface early enough to act on.
Enable frontier access. Partner with AI labs to navigate security audits, bridging our "move fast" research culture and the high-bar requirements of frontier model providers, so that compliance accelerates the research agenda rather than slowing it.
Own the cluster-side incident response capability. When something happens to the compute cluster, CI/CD pipelines, or model artefacts - a credential leak, a suspicious training job, an anomalous egress event, a supply-chain compromise alert - you are the first responder. That includes the cluster-specific IR playbook, coordinating with the IT Security Engineer on cross-cutting incidents, running tabletop exercises for cluster scenarios, and partnering with our external IR retainer firm for depth and after-hours coverage.

Essential Skills And Experience

We expect to hire someone who has all of the following:

Deep Linux systems-security experience on multi-user/HPC infrastructure (kernel/OS hardening, privileged access, host isolation, host-based detection). You also work fluently with Terraform and CI/CD systems (GitHub Actions, GitLab CI) writing the infrastructure-as-code that enforces your security model.
Experience securing cloud-native environments (AWS, GCP, and/or neoclouds), including the nuances of ephemeral, high-compute workloads.
Hands-on experience operating and securing an HPC scheduler; our cluster runs SLURM. Kubernetes is a plus.
The ability to threat-model against sophisticated adversaries and build systems robust against them.
A pragmatic approach to software supply-chain security and to the specific risks of AI-driven, agent-assisted development.
The ability to explain security trade-offs to researchers and leadership and to find the safe path to "yes."
Experience designing sandboxing and least-privilege execution for agent-driven or automated workloads.

Desired Skills And Experience

We expect highly competitive applicants to have some of the following:

Experience with the kind of stack we run or expect to run: model registries (MLflow, Weights & Biases); container and dependency scanners (Snyk, Trivy); policy-as-code (OPA); supply-chain tooling (Sigstore, cosign); and SBOM generators.
Experience with model-weight handling and the classification of sensitive or dual-use research artefacts.
A background that combines infrastructure engineering with security, from either direction.
Curiosity and genuine interest in MATS's mission. You don't need to be an AI safety expert, but you should care about the work and be motivated by its importance.
Experience with strongly segmented or air-gapped model-weight handling, hardware security modules, or FIPS-validated cryptographic controls.
Experience running continuous threat-hunting or red-team exercises against cloud and cluster infrastructure, or designing compartmentalised research environments where teams work behind separately-credentialed boundaries.

Your first year

A successful first year looks concrete: the cluster has a documented identity and access model; CI/CD is hardened against supply-chain attacks; dependency scanning catches issues pre-deploy; pre-publication research artefacts are classified and access-controlled; and we can credibly show frontier labs that our research infrastructure meets a recognised security bar (e.g. ISO 27001-equivalent) and their standards for sensitive partnerships.

About You

You are an infrastructure engineer who codes frequently and has built real security depth - or a security engineer with strong infrastructure-as-code experience. You are comfortable threat-modelling against sophisticated, potentially state-level adversaries and IP theft, and you write the IaC that encapsulates the model. You take a pragmatic view of modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity. You can explain complex security trade-offs to lead researchers and scientists, saying "yes, safely" rather than just "no." You are willing to use AI tools aggressively in your own workflow, with appropriate care not to get fooled.

About The Compensation

MATS provides in-office, catered lunches and dinners to employees on workdays.
Paid work trips, including staff retreats, business trips, and relevant conferences.
Funding and support for professional development.
Flexible PTO for Berkeley-based employees.
Flexibility for hybrid work (but not for fully remote work).
Collaborative and intellectually stimulating work environment.
Medical, dental, vision, and life insurance.
Pension Scheme for London-based candidates, or both Roth and Traditional 401(k) for Berkeley-based candidates.

We can sponsor visas for exceptional candidates where feasible.

Working hours and location

40 hours per week. Successful candidates can expect to spend most of their time working in person from either our Berkeley office or London office. We are open to hybrid working arrangements for exceptional candidates.

Note while applying

If you use an LLM chatbot or other AI tools in this application, please follow the norms here. Applications will be reviewed on a rolling basis. MATS uses LLMs to help draft job descriptions, identify candidates to source, and transcribe interviews.

MATS is committed to fostering a diverse and inclusive work environment at the forefront of our field. We encourage applications from individuals of all backgrounds and experiences.

Join us in shaping the future of AI safety & security research!

The Pay Range For This Role Is

155,000 - 220,000 GBP per year(Fora (London MATS Office))

250,000 - 340,000 USD per year(Berkeley MATS Office)

Apply About employer

More about this job

Responsibilities

Design and implement security for research infrastructure, including Linux and SLURM clusters, multi-cloud environments, CI/CD pipelines, automated agents, and research data and model artefacts. Establish secure access, supply-chain controls, monitoring, incident response, and compliance practices while enabling researchers and external lab partnerships to work safely.

Requirements

Candidates need deep Linux security experience on multi-user or HPC infrastructure, hands-on experience securing cloud-native environments and HPC schedulers such as SLURM, and fluency with Terraform and CI/CD. They must be able to threat-model sophisticated adversaries, secure software supply chains and automated workloads, and communicate practical security trade-offs to researchers and leadership.

Skills

Linux Systems Security
HPC Security
Terraform
CI/CD Security
Cloud Security
SLURM
Threat Modeling
Software Supply-Chain Security
Agent Sandboxing
Least-Privilege Access
Kubernetes
Incident Response
Policy As Code
Data Classification
Security Monitoring

Benefits

Catered Lunches And Dinners
Paid Work Trips
Professional Development Funding
Flexible Paid Time Off
Hybrid Work Flexibility
Medical Insurance
Dental Insurance
Vision Insurance
Life Insurance
Pension Scheme
401(k)
Visa Sponsorship

Visa sponsorship

Detected

Keywords

Linux
HPC
SLURM
Terraform
AWS
GCP
Neocloud
CI/CD
GitHub Actions
GitLab CI
Kubernetes
Zero Trust
Role-Based Access Control
FIDO
OPA
Sigstore
Cosign
SBOM
Snyk
Trivy
MLflow
Weights & Biases
Software Supply-Chain Security
Agent Sandboxing
Policy As Code
Incident Response
Security Information And Event Management
Data Classification
Model Weights
ISO 27001

Report this job