Senior Security Validation & Compliance Engineer

Google Canada; Ottawa; Hybrid; CAD 128,000 - 131,000; Full time

Job summary

Google Public Sector's Governance, Risk and Compliance team seeks a Senior Technical Security and Compliance Analyst in Ottawa, ON. You will lead security validation, perform vulnerability assessments and penetration testing for regulated cloud and Linux environments, and guide complex SA&A/ATO processes.

The role requires a Bachelor’s degree and 5 years in cybersecurity, with an emphasis on government or defence contexts.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related field.
• 5 years of experience in cybersecurity, security engineering, pen testing, cloud security, or vulnerability assessment.
• Experience with security validation in regulated environments (government/governmental) preferred.

Responsibilities

• Lead security validation, including vulnerability assessments and penetration testing for cloud and Linux-based environments.
• Drive SA&A/ATO processes to secure authorities to operate by translating frameworks into actionable engineering requirements.
• Automate security tasks and vulnerability management workflows using scripting and configuration assessment tools.
• Partner with product, engineering, and operations to guide security architecture, threat modeling, and software supply-chain security.
• Analyze security data to deliver mitigation recommendations to technical and non-technical stakeholders.

Skills

Cybersecurity engineering

Security assessments

Penetration testing

Threat modeling

Automation

Education

Bachelor's degree

Tools

Kubernetes

Python

Bash

Ansible

Job description

Google Public Sector's Governance, Risk and Compliance team seeks a Senior Technical Security and Compliance Analyst in Ottawa, ON. You will lead security validation, perform vulnerability assessments and penetration testing for regulated cloud and Linux environments, and guide complex SA&A/ATO processes.

The role requires a Bachelor’s degree and 5 years in cybersecurity, with an emphasis on government or defence contexts.