Find work in Canada.

457,011 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 7 hours ago
A
Full Stack Engineer
AKIERO
Canada
- Full-time
We’re looking for a Full Stack Engineer who enjoys turning business needs into well-built software. Someone who brings curiosity to a problem, takes pride in their work, and cares about the…
Added 7 hours ago
GD
Software Engineering Developer, DevOps
General Dynamics Missions System International
Ottawa, ON
- $85,000 to $110,000 CAD / year
- Full-time
We are seeking a skilled DevOps Engineer to join our team and enhance our development and operational efficiency. This role is ideal for someone who thrives in a cloud-agnostic environment…
Added 8 hours ago
J
Lead Software Engineer
Jobgether
Canada
- Full-time
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Lead Software Engineer based in Canada.
Added 8 hours ago
P
Java Software Engineer
ProxyLink
Toronto, ON
- $100 to $105 CAD / hour
- Contract
Identify opportunities for application modernization, workflow automation, and technical optimization.
Added 8 hours ago
A
Demo Engineer
Ashby
Canada
- Full-time
As Ashby’s first Demo Engineer, you’ll own the systems that make our demo environments reliable, current, and tailored - the infrastructure the entire go-to-market team leans on to show…
Added 8 hours ago
Q
FY27 Intern - Camera Design Implementation Intern - Canada (16 months)
Qualcomm
Markham, ON
- Full-time
The Design Implementation Engineer will work in Qualcomm's Spectra Camera team and will be responsible for managing all aspect of front end implementation design. The role will also include…
Added 9 hours ago
U
Senior Cloud IAM Engineer (Microsoft Entra ID & AWS)
UST
ON · Ontario, Canada
- Full-time
UST is searching for a Senior Cloud IAM Engineer who will design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS,…
Added 9 hours ago
A
Senior Test Engineer
Actalent
Ottawa, ON · Nepean, ON
- $50 to $60 CAD / hour
- Contract
The Test Engineer supports new product introduction and manufacturing test for fiber optic lab test equipment within an Ottawa-based fiber optic lab and production test business unit. This…
Added 9 hours ago
M
Innovation Hub Solution Engineer - Application Development
Microsoft
Toronto, ON · Goodwood, ON
- Full-time
As an Innovation Hub Solution Engineer in the Microsoft Innovation Hub, with a focus on Application Innovation, you will merge business and technical requirements to craft comprehensive…
Added 9 hours ago
Q
FY27 Intern - Applied AI Engineering Intern (Hardware Systems) - Canada (16 months)
Qualcomm
Markham, ON
- Full-time
Our projects span AI-assisted RTL generation and analysis, agentic design automation, functional verification, and intelligent engineering workflows that help shape the future of hardware…
Added 10 hours ago
FS
FPGA Designer
Fidus Systems
Canada
- Full-time
…Life Sciences & Medical Devices, Space & Satellite, Industrial Automation, Automotive, and Semiconductor engagements. You won't be limited to a single product or industry - your work will…
Added 10 hours ago
O
Lead Quality Assurance Developer
OpenText
Waterloo, ON
- Full-time
The Lead Quality Assurance Engineer owns QA strategy, governance, reporting, and execution across enterprise programs. This role leads teams through integration, functional, regression,…
Added 10 hours ago
O
Lead Quality Assurance Developer
OpenText
Mississauga, ON
- Full-time
The Lead Quality Assurance Engineer owns QA strategy, governance, reporting, and execution across enterprise programs. This role leads teams through integration, functional, regression,…
Added 10 hours ago
O
Lead Quality Assurance Developer
OpenText
Richmond Hill, ON
- Full-time
The Lead Quality Assurance Engineer owns QA strategy, governance, reporting, and execution across enterprise programs. This role leads teams through integration, functional, regression,…
Added 10 hours ago
C
Technical Lead, Innovation
Croesus
Montreal, QC · Laval, QC
- Full-time
…process, but someone who sets the technical bar by being the best engineer in the room, and who is genuinely obsessed with how good software gets…
Added 10 hours ago
MR
Cybersecurity Engineer (IT Security)
MATS Research
Canada
- £130,000 to £180,000 GBP / year
…the research infrastructure side functioning until a second engineer…
Added 10 hours ago
MR
Cybersecurity Engineer (Research Infrastructure)
MATS Research
Canada
- £155,000 to £220,000 GBP / year
…biased toward the research infrastructure side, until a second engineer…
Added 11 hours ago
B
Senior Director Software Engineer
Broadridge
Markham, ON
- Full-time
Champion engineering excellence by promoting best practices in automation, system resilience, and continuous improvement.
Added 12 hours ago
PC
Cloud Infrastructure Engineer, Senior Associate
PwC Canada
Toronto, ON
- Full-time
Infrastructure Automation: Develop automated processes for cloud resource provisioning, configuration, and management using tools like Terraform.
Added 12 hours ago
L
Cybersecurity Engineer - IAM
lululemon
Vancouver, BC
- Full-time
As a Cybersecurity Engineer, you will own security engineering for specific systems and platforms, designing and implementing security controls that balance protection, performance, and…
Added 12 hours ago
B
Cyber Security Specialist
BuzzClan
ON · Ontario, Canada
- Contract
Security automation and collaboration with SOC, DevOps, and cloud teams
Added 12 hours ago
PC
Cloud Infrastructure Engineer, Senior Associate
PwC Canada
Ottawa, ON
- Full-time
Infrastructure Automation: Develop automated processes for cloud resource provisioning, configuration, and management using tools like Terraform.
Added 13 hours ago
II
Lead Data Engineer
Ipsos in Canada
Vancouver, BC
- Full-time
…alerting, incident response, post-incident reviews, reliability automation, and operational…
Added 13 hours ago
L
Senior BI Platform Operations Engineer
Luxoft
Toronto, ON
- Full-time
We are looking for a hands-on BI Platform Operations Engineer to provide production operational support, administration, maintenance, and technical troubleshooting for our enterprise…
Added 13 hours ago
R
Quality Management System Process Engineer
Roche
Mississauga, ON · Welwyn, SK · Canada Pharma Campus
- Full-time
…transparency with regulators, patients, and society. As a QMS Process Engineer, you will apply your expertise to deliver operational excellence across specific "Critical-to-Quality" (CtQ)…

MATS Research

Cybersecurity Engineer (Research Infrastructure)

Canada

£155,000 to £220,000 GBP / year

Apply About employer

Applications open in a new tab.

Job details

Pay: £155,000 to £220,000 GBP / year
Working hours: 40 hours per week
Posting language: English
Posted: Sep 25, 2026

Original job description

About the role

You are the security architect for our research pipeline. You will define how we securely conduct research across our compute cluster and cloud environments, partnering closely with our compute team and engineers to make CI/CD, automated research agents, and large-scale compute secure by default. You will build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, model exfiltration, or lateral movement between research environments.

We think about security in two closely related areas. The first is research and infrastructure security - the machine-operational attack surface: the compute cluster, CI/CD pipelines, cloud infrastructure, and model artefacts and pipelines, including potentially dual-use processes and artefacts. The second is IT security - the human-operational attack surface of accounts, devices, email, and vendors. This role focuses on the former. We grow the security team one hire at a time. Depending on hiring order, your initial responsibilities may span both areas, biased toward the research infrastructure side, until a second engineer joins.

Good security here is not a brake. It is what lets us say "yes, safely" to ambitious research, and what makes deeper lab partnerships possible. You will be working at the frontier of how automated alignment research is actually done - building the security primitives for a new way of doing science, where humans and machines collaborate on the most important problem of the 21st century.

What you'll do

Harden DevSecOps and CI/CD. Build security guardrails directly into our pipelines so that every deployment (manual or agent-driven) is automatically scanned, verified, and compliant. Establish workflows where agents can test their own code and infrastructure changes against security policies before reaching production. Lead the implementation of "compliance as code," automating the auditing and enforcement of security configurations across our AWS, GCP, and neocloud footprints in Terraform. Establish and harden the source-control environment for research code (e.g. GitHub): secret scanning, dependency and code scanning, and branch protections. Issue short-lived cloud credentials from CI rather than long-lived keys.
Secure the software supply chain. In an environment that relies heavily on automated coding agents, build systems that establish the provenance of code and dependencies: robust signing, SBOM generation (Sigstore, cosign), dependency and container scanning (Snyk, Trivy), and automated vulnerability management.
Define agent sandboxing and least-privilege execution. Set and enforce the security models for our research agents. Determine what an agent can compile, deploy, or call from inside the cluster, ensuring agents hold only the access required to run experiments while remaining isolated from sensitive IP and credentials.
Own multi-cloud and cluster security. Manage the security architecture for our high-compute research environments: consistent zero-trust network segmentation, role-based access control, FIDO, and cluster identity management across cloud providers and the cluster including the access model across the fellow cohort lifecycle (how cluster access is granted, reviewed, and reliably revoked at cohort end), using policy-as-code (OPA) where it fits. As MATS consolidates model and compute access across many providers into a unified layer, own its security design.
Harden the research cluster. Own Linux OS and node security across our SLURM cluster: kernel/CVE patching, the privileged-access (sudoers/PAM) model, multi-tenant isolation, and host-based detection.
Protect research data and model weights. Develop and maintain the data-handling and classification protocols needed for pre-publication research and potentially sensitive model weights, including how weights are stored, accessed, and moved.
Secure our research-data infrastructure. MATS is building infrastructure to capture, store, and share research and experiment data, including agent-trajectory data. Design the controls that keep it safe end-to-end: data classification and provenance, access control on shared datasets, privacy and consent handling for opt-in contributors, and secure adoption of tooling built with external research partners.
Monitoring and detection. Audit-log ingestion to our SIEM, anomaly detection on identity and workload behaviour, and egress monitoring across the cluster and the unified layer, so misuse or exfiltration attempts surface early enough to act on.
Enable frontier access. Partner with AI labs to navigate security audits, bridging our "move fast" research culture and the high-bar requirements of frontier model providers, so that compliance accelerates the research agenda rather than slowing it.
Own the cluster-side incident response capability. When something happens to the compute cluster, CI/CD pipelines, or model artefacts - a credential leak, a suspicious training job, an anomalous egress event, a supply-chain compromise alert - you are the first responder. That includes the cluster-specific IR playbook, coordinating with the IT Security Engineer on cross-cutting incidents, running tabletop exercises for cluster scenarios, and partnering with our external IR retainer firm for depth and after-hours coverage.

Essential skills and experience

We expect to hire someone who has all of the following:

Deep Linux systems-security experience on multi-user/HPC infrastructure (kernel/OS hardening, privileged access, host isolation, host-based detection). You also work fluently with Terraform and CI/CD systems (GitHub Actions, GitLab CI) writing the infrastructure-as-code that enforces your security model.
Experience securing cloud-native environments (AWS, GCP, and/or neoclouds), including the nuances of ephemeral, high-compute workloads.
Hands-on experience operating and securing an HPC scheduler; our cluster runs SLURM. Kubernetes is a plus.
The ability to threat-model against sophisticated adversaries and build systems robust against them.
A pragmatic approach to software supply-chain security and to the specific risks of AI-driven, agent-assisted development.
The ability to explain security trade-offs to researchers and leadership and to find the safe path to "yes."
Experience designing sandboxing and least-privilege execution for agent-driven or automated workloads.

Desired skills and experience

We expect highly competitive applicants to have some of the following:

Experience with the kind of stack we run or expect to run: model registries (MLflow, Weights & Biases); container and dependency scanners (Snyk, Trivy); policy-as-code (OPA); supply-chain tooling (Sigstore, cosign); and SBOM generators.
Experience with model-weight handling and the classification of sensitive or dual-use research artefacts.
A background that combines infrastructure engineering with security, from either direction.
Curiosity and genuine interest in MATS's mission. You don't need to be an AI safety expert, but you should care about the work and be motivated by its importance.
Experience with strongly segmented or air-gapped model-weight handling, hardware security modules, or FIPS-validated cryptographic controls.
Experience running continuous threat-hunting or red-team exercises against cloud and cluster infrastructure, or designing compartmentalised research environments where teams work behind separately-credentialed boundaries.

Your first year

A successful first year looks concrete: the cluster has a documented identity and access model; CI/CD is hardened against supply-chain attacks; dependency scanning catches issues pre-deploy; pre-publication research artefacts are classified and access-controlled; and we can credibly show frontier labs that our research infrastructure meets a recognised security bar (e.g. ISO 27001-equivalent) and their standards for sensitive partnerships.

About you

You are an infrastructure engineer who codes frequently and has built real security depth - or a security engineer with strong infrastructure-as-code experience. You are comfortable threat-modelling against sophisticated, potentially state-level adversaries and IP theft, and you write the IaC that encapsulates the model. You take a pragmatic view of modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity. You can explain complex security trade-offs to lead researchers and scientists, saying "yes, safely" rather than just "no." You are willing to use AI tools aggressively in your own workflow, with appropriate care not to get fooled.

About the Compensation

MATS provides in-office, catered lunches and dinners to employees on workdays.
Paid work trips, including staff retreats, business trips, and relevant conferences.
Funding and support for professional development.
Flexible PTO for Berkeley-based employees.
Flexibility for hybrid work (but not for fully remote work).
Collaborative and intellectually stimulating work environment.
Medical, dental, vision, and life insurance.
Pension Scheme for London-based candidates, or both Roth and Traditional 401(k) for Berkeley-based candidates.

We can sponsor visas for exceptional candidates where feasible.

Working hours and location

40 hours per week. Successful candidates can expect to spend most of their time working in person from either our Berkeley office or London office. We are open to hybrid working arrangements for exceptional candidates.

Note while applying

If you use an LLM chatbot or other AI tools in this application, please follow the norms here. Applications will be reviewed on a rolling basis. MATS uses LLMs to help draft job descriptions, identify candidates to source, and transcribe interviews.

MATS is committed to fostering a diverse and inclusive work environment at the forefront of our field. We encourage applications from individuals of all backgrounds and experiences.

Join us in shaping the future of AI safety & security research!

Apply About employer

More about this job

Responsibilities

You will design and implement security architecture for research infrastructure, including CI/CD pipelines, compute clusters, and cloud environments. You will also act as the primary responder for security incidents and ensure research data and model weights are protected.

Requirements

The role requires deep experience in Linux systems security, infrastructure-as-code, and securing cloud-native or HPC environments. Candidates must be able to threat-model against sophisticated adversaries and communicate complex security trade-offs to research teams.

Skills

Linux systems security
Terraform
CI/CD
Cloud security
HPC scheduler
SLURM
Threat modeling
Software supply chain security
Sandboxing
Least-privilege execution
Infrastructure as code
AWS
GCP
Kubernetes
Identity and access management
Incident response

Benefits

Catered lunches and dinners
Paid work trips
Professional development funding
Flexible PTO
Medical insurance
Dental insurance
Vision insurance
Life insurance
Pension scheme
401(k)

Visa sponsorship

Detected

Keywords

Cybersecurity
DevSecOps
Linux
Terraform
CI/CD
AWS
GCP
SLURM
Kubernetes
Sigstore
Cosign
Snyk
Trivy
OPA
MLflow
Weights & Biases
Zero-trust
FIDO
SIEM
Infrastructure as code
Supply chain security
Threat modeling
Incident response
HPC
Cloud security
Data classification
Identity management
Role-based access control
Model weights
Automation

Report this job