Find work in Canada.

A simpler way to find your next job.

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 2 mins ago
IG
Senior DevOps Engineer (Azure)
Insight Global
Ottawa, ON
- $50 to $55 CAD / hour
- Contract
We are seeking a Senior DevOps Engineer to own and evolve the cloud infrastructure and CI/CD platform for our client's satellite constellation. You will be responsible for the reliability,…
Added 2 mins ago
BC
Associate, DevOps Engineer
BMO Capital Markets
Toronto, ON
- Part-time
We are seeking an experienced DevOps Engineer to join our Data Cognition Team at BMO Capital Markets. In this role, you will design, build, and maintain robust DevOps pipelines and…
Added 7 mins ago
T
Engineer II - Endpoint Protection Security
TD
Toronto, ON · Mississauga, ON · Markham, ON
- Full-time
The results of the Engineer's work ensure that TD's endpoints are protected against the newest and most sophisticated cyber attacks.
Added 38 mins ago
T
Senior Fullstack Engineer
Terminal
Canada
- Contract
…trillion-dollar industry. Role Overview As a Senior Software Engineer, you’ll take a pivotal role in building and scaling the core platform that automates and optimizes purchase order…
Added 40 mins ago
ET
Software Engineer - Embedded
Electrans Technologies Ltd
Oakville, ON
- Full-time
We are looking for a highly capable and versatile embedded software engineer to join our team. Working closely with our engineering team and colleagues across the organization, you will…
Added 40 mins ago
E
Information Security Senior Engineer - Identity Governance
Equinix
Toronto, ON
- Full-time
Equinix is the world’s digital infrastructure company®, shortening the path to connectivity to enable the innovations that enrich our work, life and planet.
Added 58 mins ago
Senior Software Engineer
Electronic Arts
Vancouver, BC
Diagnose failures across code, data, and infrastructure, fix root causes, and mentor our engineers through code reviews and knowledge sharing.
Added 1 hour ago
BC
Senior Process Engineer
Bantrel Co.
Calgary, AB
- Full-time
For 40 years we have delivered end-to-end solutions for some of Canada’s most challenging and complex energy, mining, infrastructure, and nuclear projects, with an unrelenting focus on…
Added 1 hour ago
BC
Field Specialist – PTUS
Bantrel Co.
Toronto, ON
- $95,000 to $140,000 CAD / year
- Full-time
For 40 years we have delivered end-to-end solutions for some of Canada’s most challenging and complex energy, mining, infrastructure and nuclear projects, with an unrelenting focus on…
Added 1 hour ago
W
Chief Mechanical Engineer
Worley
Oakville, ON
- Full-time
We are currently recruiting for a Principal Mechanical Lead Engineer (MMM). Our team includes world class experts and dynamic go-getters. This is a full-time position based in Oakville,…
Added 1 hour ago
AI
OBSERVABILITY ENGINEER
Apptoza Inc.
Halifax, NS
- Full-time
We are seeking an experienced Observability Engineer to join our Enterprise Kubernetes Platform team at a leading financial services organization.
Added 1 hour ago
AM
RTL Design Engineer
Advanced Micro Devices, Inc
Markham, ON
- Full-time
We are seeking a highly motivated RTL IP Design Engineer to join AMD's Security IP (SECIP) Design team. The team is responsible for the architecture, design, and verification of a broad…
Added 1 hour ago
AI
Application Specialist
Accuenergy Inc.
Toronto, ON · Greater Toronto Area, Canada
- Full-time
Prior exposure to power metering, energy management, building management, EV infrastructure, data centres, BESS, or related industrial domains.
Added 2 hours ago
IC
Sr Security Architect
iPartner Consulting
Toronto, ON
- Contract
Collaborate with security, infrastructure, and operational teams to integrate identity, endpoint, and network security solutions.
Added 2 hours ago
IC
Compiler Engineering Graduate Intern
Intel Corporation
Toronto, ON · CAN - - Toronto
- Full-time
We are hiring a Compiler Engineer Intern to contribute to Intel's compiler software stack. You will work with experienced compiler and hardware architecture engineers on an engineering or…
Added 2 hours ago
Senior Agentic AI Software Backend & Platform Engineer
Siemens
Kitchener, ON
We are seeking a Senior Backend & AI Engineer for Siemens Digital Industries Operations Software, to lead the development and scaling of our Agentic AI platform. The role focuses on strong…
Added 2 hours ago
Senior Agentic AI DevOps Engineer
Siemens
Kitchener, ON
We are seeking a hands-on Senior DevOps Engineer, to join Digital Industries Operations Software lead the deployment, operation, and scaling of our Agentic AI platform. The role is strongly…
Added 3 hours ago
TC
Full Stack Engineer
The Credit Counselling Society
New Westminster, BC
- Full-time
The Full Stack Engineer at the Credit Counselling Society is responsible for a number of key responsibilities to build on and support the successful operations of our business, enabling our…
Added 3 hours ago
ND
Software Engineer
Newfold Digital
Halifax, NS · NS
- Full-time
We are seeking a highly skilled and passionate Software Engineer with 3 - 5 years of professional experience to join our dynamic development team. The ideal candidate will have strong…
Added 3 hours ago
C
Business Development Manager, USA/Canada - Remote
CVEDIA
Remote, Canada
- Full-time
- Remote
Build and close a pipeline of integrators, distributors and enterprise end users across security, retail, transportation and critical infrastructure.
Added 4 hours ago
SS
Dev Ops II, Public Cloud
Safe Software
Remote, Canada
- Full-time
- Remote
Safe Software is looking for a fun-loving, talented DevOps Engineer who is interested in becoming part of one of the fastest growing data integration companies in the world! As a DevOps…
Added 4 hours ago
HT
IT Product Engineer - HRIS
Huawei Technologies Canada Co., Ltd.
Markham, ON
- Contract
Huawei Canada has an immediate 12-month contract opening for an IT Product Engineer Assistant.
Added 4 hours ago
ST
Operations Engineer
Saltworks Technologies: Industrial Water + Lithium
SK · Saskatchewan, Canada
- Full-time
Join Saltworks as an Operations Engineer and take on an exciting, on-site, hands-on role supporting the launch of a first-of-its-kind lithium demonstration plant located near Stoughton,…
Added 4 hours ago
S
Junior AI Engineer Co-op
symplistic.ai
Woodbridge, ON
- $23 CAD / hour
- Internship
As an AI Engineer Co-op at Symplistic.ai, you will work directly with our engineering team to design, develop, test, and deploy enterprise AI applications and AI agents.
Added 4 hours ago
C
Principal Architect
Camis
Guelph, ON
- Full-time
…role (e.g., Software Architect, Technical Architect, Staff Engineer, Principal Engineer, or…

MATS Research

Cybersecurity Engineer (Research Infrastructure)

Canada

£155,000 to £220,000 GBP / year

Apply About employer

Applications open in a new tab.

Job details

Pay: £155,000 to £220,000 GBP / year
Working hours: 40 hours per week
Posting language: English
Posted: Sep 25, 2026

Original job description

About the role

You are the security architect for our research pipeline. You will define how we securely conduct research across our compute cluster and cloud environments, partnering closely with our compute team and engineers to make CI/CD, automated research agents, and large-scale compute secure by default. You will build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, model exfiltration, or lateral movement between research environments.

We think about security in two closely related areas. The first is research and infrastructure security - the machine-operational attack surface: the compute cluster, CI/CD pipelines, cloud infrastructure, and model artefacts and pipelines, including potentially dual-use processes and artefacts. The second is IT security - the human-operational attack surface of accounts, devices, email, and vendors. This role focuses on the former. We grow the security team one hire at a time. Depending on hiring order, your initial responsibilities may span both areas, biased toward the research infrastructure side, until a second engineer joins.

Good security here is not a brake. It is what lets us say "yes, safely" to ambitious research, and what makes deeper lab partnerships possible. You will be working at the frontier of how automated alignment research is actually done - building the security primitives for a new way of doing science, where humans and machines collaborate on the most important problem of the 21st century.

What you'll do

Harden DevSecOps and CI/CD. Build security guardrails directly into our pipelines so that every deployment (manual or agent-driven) is automatically scanned, verified, and compliant. Establish workflows where agents can test their own code and infrastructure changes against security policies before reaching production. Lead the implementation of "compliance as code," automating the auditing and enforcement of security configurations across our AWS, GCP, and neocloud footprints in Terraform. Establish and harden the source-control environment for research code (e.g. GitHub): secret scanning, dependency and code scanning, and branch protections. Issue short-lived cloud credentials from CI rather than long-lived keys.
Secure the software supply chain. In an environment that relies heavily on automated coding agents, build systems that establish the provenance of code and dependencies: robust signing, SBOM generation (Sigstore, cosign), dependency and container scanning (Snyk, Trivy), and automated vulnerability management.
Define agent sandboxing and least-privilege execution. Set and enforce the security models for our research agents. Determine what an agent can compile, deploy, or call from inside the cluster, ensuring agents hold only the access required to run experiments while remaining isolated from sensitive IP and credentials.
Own multi-cloud and cluster security. Manage the security architecture for our high-compute research environments: consistent zero-trust network segmentation, role-based access control, FIDO, and cluster identity management across cloud providers and the cluster including the access model across the fellow cohort lifecycle (how cluster access is granted, reviewed, and reliably revoked at cohort end), using policy-as-code (OPA) where it fits. As MATS consolidates model and compute access across many providers into a unified layer, own its security design.
Harden the research cluster. Own Linux OS and node security across our SLURM cluster: kernel/CVE patching, the privileged-access (sudoers/PAM) model, multi-tenant isolation, and host-based detection.
Protect research data and model weights. Develop and maintain the data-handling and classification protocols needed for pre-publication research and potentially sensitive model weights, including how weights are stored, accessed, and moved.
Secure our research-data infrastructure. MATS is building infrastructure to capture, store, and share research and experiment data, including agent-trajectory data. Design the controls that keep it safe end-to-end: data classification and provenance, access control on shared datasets, privacy and consent handling for opt-in contributors, and secure adoption of tooling built with external research partners.
Monitoring and detection. Audit-log ingestion to our SIEM, anomaly detection on identity and workload behaviour, and egress monitoring across the cluster and the unified layer, so misuse or exfiltration attempts surface early enough to act on.
Enable frontier access. Partner with AI labs to navigate security audits, bridging our "move fast" research culture and the high-bar requirements of frontier model providers, so that compliance accelerates the research agenda rather than slowing it.
Own the cluster-side incident response capability. When something happens to the compute cluster, CI/CD pipelines, or model artefacts - a credential leak, a suspicious training job, an anomalous egress event, a supply-chain compromise alert - you are the first responder. That includes the cluster-specific IR playbook, coordinating with the IT Security Engineer on cross-cutting incidents, running tabletop exercises for cluster scenarios, and partnering with our external IR retainer firm for depth and after-hours coverage.

Essential skills and experience

We expect to hire someone who has all of the following:

Deep Linux systems-security experience on multi-user/HPC infrastructure (kernel/OS hardening, privileged access, host isolation, host-based detection). You also work fluently with Terraform and CI/CD systems (GitHub Actions, GitLab CI) writing the infrastructure-as-code that enforces your security model.
Experience securing cloud-native environments (AWS, GCP, and/or neoclouds), including the nuances of ephemeral, high-compute workloads.
Hands-on experience operating and securing an HPC scheduler; our cluster runs SLURM. Kubernetes is a plus.
The ability to threat-model against sophisticated adversaries and build systems robust against them.
A pragmatic approach to software supply-chain security and to the specific risks of AI-driven, agent-assisted development.
The ability to explain security trade-offs to researchers and leadership and to find the safe path to "yes."
Experience designing sandboxing and least-privilege execution for agent-driven or automated workloads.

Desired skills and experience

We expect highly competitive applicants to have some of the following:

Experience with the kind of stack we run or expect to run: model registries (MLflow, Weights & Biases); container and dependency scanners (Snyk, Trivy); policy-as-code (OPA); supply-chain tooling (Sigstore, cosign); and SBOM generators.
Experience with model-weight handling and the classification of sensitive or dual-use research artefacts.
A background that combines infrastructure engineering with security, from either direction.
Curiosity and genuine interest in MATS's mission. You don't need to be an AI safety expert, but you should care about the work and be motivated by its importance.
Experience with strongly segmented or air-gapped model-weight handling, hardware security modules, or FIPS-validated cryptographic controls.
Experience running continuous threat-hunting or red-team exercises against cloud and cluster infrastructure, or designing compartmentalised research environments where teams work behind separately-credentialed boundaries.

Your first year

A successful first year looks concrete: the cluster has a documented identity and access model; CI/CD is hardened against supply-chain attacks; dependency scanning catches issues pre-deploy; pre-publication research artefacts are classified and access-controlled; and we can credibly show frontier labs that our research infrastructure meets a recognised security bar (e.g. ISO 27001-equivalent) and their standards for sensitive partnerships.

About you

You are an infrastructure engineer who codes frequently and has built real security depth - or a security engineer with strong infrastructure-as-code experience. You are comfortable threat-modelling against sophisticated, potentially state-level adversaries and IP theft, and you write the IaC that encapsulates the model. You take a pragmatic view of modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity. You can explain complex security trade-offs to lead researchers and scientists, saying "yes, safely" rather than just "no." You are willing to use AI tools aggressively in your own workflow, with appropriate care not to get fooled.

About the Compensation

MATS provides in-office, catered lunches and dinners to employees on workdays.
Paid work trips, including staff retreats, business trips, and relevant conferences.
Funding and support for professional development.
Flexible PTO for Berkeley-based employees.
Flexibility for hybrid work (but not for fully remote work).
Collaborative and intellectually stimulating work environment.
Medical, dental, vision, and life insurance.
Pension Scheme for London-based candidates, or both Roth and Traditional 401(k) for Berkeley-based candidates.

We can sponsor visas for exceptional candidates where feasible.

Working hours and location

40 hours per week. Successful candidates can expect to spend most of their time working in person from either our Berkeley office or London office. We are open to hybrid working arrangements for exceptional candidates.

Note while applying

If you use an LLM chatbot or other AI tools in this application, please follow the norms here. Applications will be reviewed on a rolling basis. MATS uses LLMs to help draft job descriptions, identify candidates to source, and transcribe interviews.

MATS is committed to fostering a diverse and inclusive work environment at the forefront of our field. We encourage applications from individuals of all backgrounds and experiences.

Join us in shaping the future of AI safety & security research!

Apply About employer

More about this job

Responsibilities

You will design and implement security architecture for research infrastructure, including CI/CD pipelines, compute clusters, and cloud environments. You will also act as the primary responder for security incidents and ensure research data and model weights are protected.

Requirements

The role requires deep experience in Linux systems security, infrastructure-as-code, and securing cloud-native or HPC environments. Candidates must be able to threat-model against sophisticated adversaries and communicate complex security trade-offs to research teams.

Skills

Linux systems security
Terraform
CI/CD
Cloud security
HPC scheduler
SLURM
Threat modeling
Software supply chain security
Sandboxing
Least-privilege execution
Infrastructure as code
AWS
GCP
Kubernetes
Identity and access management
Incident response

Benefits

Catered lunches and dinners
Paid work trips
Professional development funding
Flexible PTO
Medical insurance
Dental insurance
Vision insurance
Life insurance
Pension scheme
401(k)

Visa sponsorship

Detected

Keywords

Cybersecurity
DevSecOps
Linux
Terraform
CI/CD
AWS
GCP
SLURM
Kubernetes
Sigstore
Cosign
Snyk
Trivy
OPA
MLflow
Weights & Biases
Zero-trust
FIDO
SIEM
Infrastructure as code
Supply chain security
Threat modeling
Incident response
HPC
Cloud security
Data classification
Identity management
Role-based access control
Model weights
Automation

Report this job