Cybersecurity Engineer - 405 EN

Position: Cybersecurity Engineer

Employment Type: Permanent

Location: Export Development Canada operates under a hybrid work model, with employees currently required to work from the office two days per week. Effective September 2026, this requirement will increase to three days per week and will be implemented gradually through a phased approach based on employee location (subject to change). This role can be performed from EDC's headquarters in Ottawa or from one of our Community Hubs located in Toronto or Montreal. Relocation assistance is available for candidates who meet the eligibility criteria.

Application deadline: September 25, 2026 12:00PM ET

About EDC

At Export Development Canada (EDC), we empower Canadian businesses to succeed globally. As a financial Crown corporation, we offer innovative financial solutions and expert insights to help businesses explore new markets, mitigate risks, and achieve growth.

Why Join EDC?

Comprehensive Benefits: EDC offers a competitive compensation & benefits package, work-life balance, & the opportunity to help make Canada and the world better through trade.

Work-Life Balance: EDC offers a competitive compensation package & work-life balance. We have hybrid work options, 3 to 4 weeks paid vacation, a corporate closure period, summer early Friday's & no meeting Fridays.

Professional Development: Take advantage of our continuous learning opportunities, including training programs, workshops and language training.

Inclusive Culture: Be part of a diverse and inclusive workplace that champions employment equity & values diversity of ideas, strengths, & backgrounds to succeed.

Wellness Programs: Access to wellness initiatives, mental health support, and fitness programs to keep you healthy and happy.

Community Engagement: Participate in volunteer opportunities and give back to the community through our various social responsibility programs.

Team Overview

The Digital & Technology Solutions (DTS) group under the leadership of the Chief Information Officer was established in 2023 with the mission of empowering our customers and colleagues to take on the world, by seamlessly delivering secure and reliable digital experiences. Digital & Technology Solutions has set out to achieve the following objectives for EDC:

• Define, execute, and sustain the integrated technology target state, target data model and technology operations required to enable EDC's 2030 business transformation.
• Establish and manage the rolling 3 Year Digital Roadmap that sequences the technology outcomes required to achieve the technology target state and facilitate its execution across all domains in the organization.
• Keep pace with industry trends and emerging technologies, ensuring EDC has access to the digital technology tools it needs to stay relevant in the market and grow Canadian global trade.
• Lead and ensure integrated digital, data, infrastructure, and cybersecurity implementations to create excellent customer, user, and employee experiences.

This is your opportunity to join a cybersecurity team with a business-first mindset. We're looking for a technically versatile Cybersecurity Engineer to work broadly across EDC's technology stack — an "inch deep, mile wide" generalist who elevates security posture enterprise-wide while partnering directly with delivery teams to co-create solutions that are both secure and business-enabling.

You will not be expected to be a deep specialist in every security domain. Success in this role comes from strong security fundamentals, curiosity, sound judgment, and the ability to learn quickly while partnering with experts across the organization.

You will be part of a growing team of cybersecurity professionals who value transparent communication, innovation, and collaboration with diverse internal and external stakeholders - while remaining equally committed to managing information security risk and delivering on our planned security program obligations.

We encourage applications from candidates who may not meet every listed qualification but bring strong security fundamentals, relevant experience, and a willingness to grow. This role is designed to evolve with the individual as the security program and technology landscape mature.

What you will be doing

Security Engineering & Posture Improvement:

• Partner with infrastructure, cloud, and application teams to embed security controls across EDC's technology stack - from cloud-native services and APIs to on-premise systems and SaaS platforms.
• Identify security gaps and vulnerabilities across the environment, prioritize remediation, and develop tactical plans to address them in collaboration with platform owners.
• Design and implement security tooling, hardening standards, and automation to continuously improve EDC's security baseline.
• Contribute to threat modelling, security architecture reviews, and the assessment of emerging technologies before adoption.
• Monitor the threat landscape and evaluate how new attack techniques may affect EDC's environment, translating findings into actionable improvements.

Secure Delivery Enablement:

• Embed as a security partner within delivery squads and agile teams, providing hands-on guidance during design, development, and deployment to ensure security is built in — not bolted on.
• Conduct security reviews of project documentation, architecture diagrams, code changes, and configuration decisions, providing constructive, actionable feedback.
• Champion secure-by-default patterns, DevSecOps practices, and shift-left security thinking across engineering teams.
• Develop and maintain security standards, guidelines, and reusable patterns that enable teams to move quickly without compromising security posture.
• Act as a trusted advisor to product and engineering stakeholders, translating security risks into business language and helping teams make informed risk-based decisions.

AI, Machine Learning (ML) & Emerging Technology Security:

• Assess and address security risks specific to AI/ML workloads, including model integrity, data pipeline security, prompt injection, and the secure deployment of AI-enabled applications.
• Support EDC's evolving approach to AI security through risk assessments, security reviews, governance input, and collaboration with platform and delivery teams.
• Apply AI and ML tools to enhance security operations where appropriate - including anomaly detection, automated threat hunting, intelligent alert triage, or other practical security use cases.
• Explore and evaluate AI-assisted security tooling to improve team effectiveness and coverage across the environment.
• Keep pace with industry trends and emerging technologies, ensuring EDC's security practices evolve alongside the technology landscape.

Cross-Functional Collaboration & Communication:

• Collaborate across the Digital & Technology Solutions group and with business stakeholders to align security practices with strategic objectives and EDC's 2030 transformation roadmap.
• Communicate complex security concepts clearly to both technical and non-technical audiences, influencing and persuading at multiple levels.
• Contribute to KPI and metrics development to track and demonstrate improvements in security posture over time.
• Support continuous improvement initiatives and contribute to the evolution of the EIS team's operating model and security program.

What we are looking for

Post-secondary degree in Computer Science, Information Security,…