Application deadline: September 25, 2026 12:00PM ETJoin the EDC Team!At EDC, we support Canadian businesses to succeed globally. We provide the financial tools and expertise they need to explore new markets, reduce risks, all towards the goal of making Canada and the world better through trade.PositionCybersecurity EngineerEmployment TypePermanentCompensation DetailsCyber Security Specialist 18: Salaries typically range from $96,557 to $128,742 annually, based on qualifications and experiences, plus a performance-based incentiveLocationExport Development Canada operates under a hybrid work model, with employees currently required to work from the office two days per week. Effective September 2026, this requirement will increase to three days per week and will be implemented gradually through a phased approach based on employee location. (subject to change).This role can be performed from EDC's headquarters in Ottawa or from one of our Community Hubs located in Toronto or MontrealRelocation assistance is available for candidates who meet the eligibility criteriaInternal Employees, please consult the ServiceNow article entitled Internal movements - what you need to know.About EDCAt Export Development Canada (EDC), we empower Canadian businesses to succeed globally. As a financial Crown corporation, we offer innovative financial solutions and expert insights to help businesses explore new markets, mitigate risks, and achieve growth.Why Join EDC?Comprehensive Perks: EDC offers a competitive compensation & benefits package, work-life balance, & the opportunity to help make Canada and the world better through tradeWork-Life Balance: EDC offers a competitive compensation package & work-life balance. We have hybrid work options, 3 to 4 weeks paid vacation, a corporate closure period, summer early Friday's & no meeting FridaysProfessional Development: Take advantage of our continuous learning opportunities, including training programs, workshops and language trainingInclusive Culture: Be part of a diverse and inclusive workplace that champions employment equity & values diversity of ideas, strengths, & backgrounds to succeedWellness Programs: Access to wellness initiatives, mental health support, and fitness programs to keep you healthy and happyCommunity Engagement: Participate in volunteer opportunities and give back to the community through our various social responsibility programsTeam OverviewThe Digital & Technology Solutions (DTS) group under the leadership of the Chief Information Officer was established in 2023 with the mission of empowering our customers and colleagues to take on the world, by seamlessly delivering secure and reliable digital experiences. Digital & Technology Solutions has set out to achieve the following objectives for EDC:Define, execute, and sustain the integrated technology target state, target data model and technology operations required to enable EDC's 2030 business transformationEstablish and manage the rolling 3 Year Digital Roadmap that sequences the technology outcomes required to achieve the technology target state and facilitate its execution across all domains in the organizationKeep pace with industry trends and emerging technologies, ensuring EDC has access to the digital technology tools it needs to stay relevant in the market and grow Canadian global tradeLead and ensure integrated digital, data, infrastructure, and cybersecurity implementations to create excellent customer, user, and employee experiences.This is your opportunity to join a cybersecurity team with a business-first mindset. We're looking for a technically versatile Cybersecurity Engineer to work broadly across EDC's technology stack — an "inch deep, mile wide" generalist who elevates security posture enterprise-wide while partnering directly with delivery teams to co-create solutions that are both secure and business-enabling.You will not be expected to be a deep specialist in every security domain. Success in this role comes from strong security fundamentals, curiosity, sound judgment, and the ability to learn quickly while partnering with experts across the organization.You will be part of a growing team of cybersecurity professionals who value transparent communication, innovation,



and collaboration with diverse internal and external stakeholders - while remaining equally committed to managing information security risk and delivering on our planned security program obligations.We encourage applications from candidates who may not meet every listed qualification but bring strong security fundamentals, relevant experience, and a willingness to grow. This role is designed to evolve with the individual as the security program and technology landscape mature.What you will be doing:Security Engineering & Posture ImprovementPartner with infrastructure, cloud, and application teams to embed security controls across EDC's technology stack - from cloud-native services and APIs to on-premise systems and SaaS platformsIdentify security gaps and vulnerabilities across the environment, prioritize remediation, and develop tactical plans to address them in collaboration with platform ownersDesign and implement security tooling, hardening standards, and automation to continuously improve EDC's security baselineContribute to threat modelling, security architecture reviews, and the assessment of emerging technologies before adoptionMonitor the threat landscape and evaluate how new attack techniques may affect EDC's environment, translating findings into actionable improvementsSecure Delivery EnablementEmbed as a security partner within delivery squads and agile teams, providing hands‐on guidance during design, development, and deployment to ensure security is built in — not bolted onConduct security reviews of project documentation, architecture diagrams, code changes, and configuration decisions, providing constructive, actionable feedbackChampion secure‐by‐default patterns, DevSecOps practices, and shift‐left security thinking across engineering teamsDevelop and maintain security standards, guidelines, and reusable patterns that enable teams to move quickly without compromising security postureAct as a trusted advisor to product and engineering stakeholders, translating security risks into business language and helping teams make informed risk‐based decisionsAI, Machine Learning (ML) & Emerging Technology SecurityAssess and address security risks specific to AI/ML workloads, including model integrity, data pipeline security, prompt injection, and the secure deployment of AI‐enabled applicationsSupport EDC's evolving approach to AI security through risk assessments, security reviews, governance input, and collaboration with platform and delivery teamsApply AI and ML tools to enhance security operations where appropriate - including anomaly detection, automated threat hunting, intelligent alert triage, or other practical security use casesExplore and evaluate AI‐assisted security tooling to improve team effectiveness and coverage across the environmentKeep pace with industry trends and emerging technologies, ensuring EDC's security practices evolve alongside the technology landscapeCross-Functional Collaboration & CommunicationCollaborate across the Digital & Technology Solutions group and with business stakeholders to align security practices with strategic objectives and EDC's 2030 transformation roadmapCommunicate complex security concepts clearly to both technical and non-technical audiences, influencing and persuading at multiple levelsContribute to KPI and metrics development to track and demonstrate improvements in security posture over timeSupport continuous improvement initiatives and contribute to the evolution of the EIS team's operating model and security programWhat we are looking for:Post‐secondary degree in Computer Science, Information Security, Engineering, or a related field and equivalent practical experienceMinimum 7 years of hands‐on experience in cybersecurity engineering, application security, cloud security, or a comparable technical security roleDemonstrated breadth across multiple security domains, such as application security, cloud security, identity, network security, endpoint security, data protection, or vulnerability managementStrength in several security areas, combined with working knowledge across others.



Candidates are not expected to be experts in every domainExperience partnering with software delivery or platform engineering teams - embedding security into SDLC processes, CI/CD pipelines, and agile workflowsProficiency with cloud security, with Azure preferred and AWS or GCP experience valued, including experience securing cloud‐native architectures and servicesHands‐on experience with a broad and diverse security toolset, which may include SIEM, vulnerability management, DAST/SAST, secrets management, identity platforms, endpoint security, cloud security tools, or similar technologiesFamiliarity with AI/ML security considerations, including securing AI‐powered applications and/or using AI tools to enhance security operationsExperience with AI security may include hands‐on work, architectural review, governance, risk assessment, proof‐of‐concept activity, or close collaboration with AI platform teamsStrong communication skills with the ability to translate technical security risk into clear business impact for a range of audiencesCollaborative, curious, and comfortable with ambiguity - able to operate independently while knowing when to engage stakeholders and elevateWhat will make you stand out:Professional certifications such as CISSP, CCSP, CEH, OSCP, Azure Security Specialty, Microsoft Professional Certifications, or equivalentExperience with AI/ML platforms, LLM security, or securing data science and analytics pipelinesExposure to platforms such as Copilot Studio, Databricks, SaaS embedded AI or similar enterprise AI servicesFamiliarity with Salesforce, ServiceNow, and other enterprise SaaS security patternsKnowledge of Canadian regulatory and compliance frameworks applicable to federal Crown corporationsExperience with scripting or coding, such as Python, PowerShell, or Bash, for security automationBilingual in both official languages (English and French)EligibilityEDC is committed to Fair Employment Practices and preference will be given to a candidate who is able to work legally in Canada at the time of application (Canadian Citizens or Permanent Residents). Candidates must meet the requisite government security screening requirements. Internal applicants must also meet EDC's eligibility criteria for applying to internal opportunities. For more information, please refer to Section 2.1 in the Talent Acquisition Standard, available on LINK under the Resources tab in the Policies & Procedures section.The position is open to those who meet all of the essential requirements stated above and whose applications are received by the closing date.The position is open to those who meet all of the essential requirements stated above and whose applications are received by the closing date.This position is open to individuals who meet all the essential criteria outlined above and submit their applications by the closing date.EDC's Commitment to Employment EquityExport Development Canada (EDC) is dedicated to fostering employment equity and building a diverse workforce. We are committed to creating a safe and inclusive environment that respects people from all cultures, backgrounds, and abilities. At EDC, we nurture a culture of inclusion and belonging where everyone has equal opportunity to grow, develop, succeed, and be their truest selves.We actively encourage applications from women, Indigenous peoples, visible minorities, persons with disabilities, and members of the 2SLGBTQI+ community.Your application must clearly demonstrate how you meet all the requirements. We thank all applicants' interest in a career at EDC; however, only those selected for an interview will be contacted. Please note that qualified candidates may be considered for similar roles at this level within EDC.EDC recognizes that disclosing the need for accommodations can be a personal matter. Please know that as an organization, we are committed to maintaining confidentiality and ensuring that any accommodations provided are tailored to support your needs. Our aim is to ensure you have a comfortable and positive experience throughout the recruitment process, so please do not hesitate to contact us directly for any accommodation requests at [email protected]. We are here to support you every step of the way.Privacy NoticeBy applying for this job you acknowledge that you have read and understood EDC's Privacy Notice for Job Applicants, which outlines how we collect, use, retain, and safeguard personal information during the recruitment process, as well as your rights of access and correction

📌 Cybersecurity Engineer - 405 En (Toronto)
🏢 Export Development Canada | Exportation et développement Canada
📍 Toronto