Back


 Back to Home Page

Job Detail

Senior Cloud Security Operations Engineer

Thales Group

Ottawa, Ontario

Please login to apply for this job.

    Save this job      2026-02-24

Senior Cloud Security Operations Engineer

Thales Group

Ottawa, Ontario
 
Salary: Information not available
 
JOB DESCRIPTION
Location: Ottawa, Canada

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

This position is hybrid out of Ottawa, ON

Position Summary:

 Thales Cyber Security Products (CSP) is a worldwide leader in data protection, providing everything an organization needs to protect and manage its data, identities and intellectual property – through encryption, advanced key management, tokenization, and authentication and access management. We are looking for talented Security professionals who can help us secure our next generation of security products.

We are have a current vacancy for a Senior Cloud Security Operations Engineer to join our growing Cloud Security team in Ottawa, ON. In this role, you will lead efforts to secure our multi-cloud environment, monitor for threats, respond to incidents, and ensure compliance with industry standards. You will work closely with DevOps, Service and Engineering teams to identify vulnerabilities, define security requirements, and implement best practices for protecting sensitive data and services.

This is a hands-on technical position ideal for someone with deep cloud security expertise, strong analytical skills, and a passion for safeguarding enterprise environments.

Essential Functions:

Cloud Security Operations

  • Manage, monitor, and enhance the security posture of cloud environments (AWS, GCP, Azure etc.).
  • Oversee the implementation and tuning of full security tooling stack including Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP) and Endpoint Detection (EDR) tools.
  • Develop and maintain automation for threat detection, incident response, and compliance reporting.

Supporting Dev, DevOps & Service Teams

  • Act as a security partner to development and service teams, ensuring security is built into applications and infrastructure from the start.
  • Build relationships with DevOps and engineering teams to foster a security-first culture.
  • Provide guidance on secure architecture, cloud configuration, IAM, and data protection strategies.
  • Review Infrastructure-as-Code (Terraform, CloudFormation, etc.) for security compliance and vulnerabilities.

Threat Detection & Incident Response

  • Lead investigations into security alerts, potential breaches, and suspicious activity.
  • Participate in an on-call rotation to respond to issues or problems arising during non-business hours and provide support and response.
  • Perform forensic analysis and root cause investigations in cloud environments.
  • Coordinate with cross-functional teams to contain and remediate incidents.

Risk & Compliance

  • Ensure compliance with frameworks such as SOC 2, ISO 27001, PCI-DSS and cloud security benchmarks like CIS.
  • Conduct regular security assessments, including vulnerability scans and configuration audits.
  • Partner with internal teams to ensure security-by-design in new deployments.

Collaboration & Leadership

  • Act as a subject matter expert (SME) for cloud security controls, operations and tooling.
  • Provide clear reporting and risk insights to leadership and stakeholders.

Minimum Requirements:

  • 7+ years of technical experience or a Bachelor’s degree in Computer Science, Electrical Engineering, or Engineering with an additional 5 or more years InfoSec/IT Security Experience.
  • 7+ years of experience in Information Security, with at least 5 years hands-on work securing cloud environments.
  • Strong understanding of Cloud Security/Cyber Security concepts, practices and procedures.
  • A strong understanding of IAM, role based access controls, network security, and cloud infrastructure security.
  • Proven track record of researching, implementing and tuning all security controls for cloud environments such as AWS, GCP and/or Azure.
  • Proficiency with modern security tools including SIEMs (e.g., Splunk, XSIAM), SOAR platforms, CSPM/CWPP, scanning and endpoint detection tools.
  • Strong understanding of encryption, security and authentication protocols including TLS, SSH, OAuth, SAML, and Kerberos.
  • Experience with Infrastructure as Code technologies (e.g. Terraform, CloudFormation) and GitOps. Capable of configuring IAM permissions, authentication, and automation through Policy as Code.
  • Familiarity with various network controls including proxies and reverse proxies, network and application load balancers, stateful and deep packet inspection.
  • Knowledge of Linux and Windows administration and OS hardening.

Preferred Qualifications:

  • Demonstrable experience in solving challenging security problems using knowledge and/or skills.
  • One or more of the following certifications (or similar): CISSP, or cloud security certifications such as AWS Certified Security – Specialty, Azure Security Engineer, or GCP Security Engineer.
  • Experience on a Computer Incident Response Team (CIRT) or Security Operations Center (SOC) team.
  • Familiarity with container orchestration (Kubernetes, ECS, EKS, AKS) and securing serverless workloads.
  • Experience performing vulnerability assessments and threat modeling.
  • Demonstrable Experience with DevSecOps practices and CI/CD security integration. Scripting/automation skills example Python, Bash, PowerShell.

#LI-Hybrid

#LI-MG1

The reference Total Target Compensation(TTC) market range for this position, inclusive of annual base salary and the variable compensation target, is between Total Target Cash (TTC): 90,000-140,000 CAD Annual

This reflects how companies in a similar industry and geographic region generally pay for similar jobs. This range helps the Company make pay decisions as one data point among many. Where a position falls within this range is also dependent on other factors including – but not limited to – the employee’s career path history, competencies, skills and performance, as well as the company’s annual salary budget, the customer’s program requirements, and the company’s internal equity. Thales may offer additional benefits and other compensation, depending on circumstances not related to an applicant’s status protected by local, state, or federal law.

We use artificial intelligence–enabled tools as part of our recruitment process to support activities such as candidate discovery, résumé matching, and interview scheduling. These tools may help screen and assess applications and recommend potential matches based on the requirements within the job description.  All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters. Artificial intelligence does not make hiring decisions on our behalf.

Thales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following: 

• Company paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.

• Retirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.

• Company paid holidays, vacation days, and paid sick leave. 

• Voluntary Life, AD&D, Critical Illness, Long-Term Disability.

• Employee Discounts on home, auto, and gym membership.

Thales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.

We are committed to hiring military and Veteran spouses and encourage you to identify your connection with the MSEN when reaching out to us or applying to any of our open roles.

 

Have questions or want to learn more about us? We would love to hear from you!

 

Kimberly.leet@thalesgroup.com

 

Whenever possible, reach out to a named contact rather than a general inbox  - it helps ensure a quicker, more personalized response. If you hit a bounce-back, let us know at

employment.Emploi@cfmws.com

About Thales Group

For more than 50 years, Thales has partnered with Canada on products and services that fuel our customers’ critical missions and big ambitions. Our multi-decade commitment strengthens the nation’s economy through high-technology jobs, investments in domestic research and technology, and solutions for the aerospace, defence, cyber and digital markets. Addressing a growing range of threats, Thales supports nations and their armed forces to make the right decisions at the right time through advanced technologies, solutions and services – in the land, sea, and air domains. From cybersecurity to AI, we are constantly innovating to enable forces to achieve the operational superiority. As a trusted partner, Thales enables armed forces to generate and collect data, collaborate and be connected – over land, sea, and air. From AI to unmanned systems, our commitment to innovation ensures the development of the most advanced and cybersecure solutions, giving armed forces the edge to cover the full decision chain, from threat detection to neutralisation, and from mission preparation to post-analysis.