Current jobs related to Cybersecurity Researcher - Canada - Safety Cybersecurity

  • Cybersecurity Researcher

    6 hours ago

    , , Canada Safety Full time

    This range is provided by Safety. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more. Base pay range CA$120,000.00/yr - CA$150,000.00/yr Our Mission Safety secures the software supply chain for the world's data and development teams. We protect every package that is actually used, from local developer...

  • Cybersecurity Researcher — Remote, Flexible Hours, Equity

    6 hours ago

    , , Canada Safety Full time

    A cybersecurity company in Canada is seeking a Cybersecurity Researcher to enhance their security offerings. This role involves real-time analysis of malicious packages, enriching vulnerability data, and developing AI-driven detection tools. Ideal candidates have multi-year experience in cybersecurity research and expertise in package ecosystems like PyPI...

  • Senior iOS Vulnerability Researcher

    3 weeks ago

    , , Canada Eleks Full time

    A cybersecurity firm is seeking an Expert/Senior iOS Vulnerability Researcher to enhance resilience against mobile threats. The ideal candidate has 5+ years of experience, strong skills in Objective-C and Swift, and eligibility for U.S. security clearance. Responsibilities include conducting vulnerability research, designing fuzzing campaigns, and reverse...

  • Manager, Research Operations

    7 days ago

    Toronto, Ontario, MC E Canada Toronto East Health Network Full time

    Position OverviewJoin Michael Garron Hospital (MGH), a vibrant large community teaching hospital serving more than 400,000 people in East Toronto, as our next Manager, Research Operations. As part of Toronto East Health Network (TEHN), MGH is deeply committed to embedding research, innovation, and quality improvement into every facet of care — from the...

  • Principal Consultant, Offensive Security, Proactive Services

    2 weeks ago

    , , Canada Palo Alto Networks Full time

    Overview Employer Industry: Cybersecurity Why consider this job opportunity: Salary up to $208,000 per year Opportunity to work remotely and collaborate with a global team Engaging and innovative work culture that values trust and accountability Chance to lead client engagements and make a significant impact on cybersecurity practices Access to professional...

  • Channel Account Manager

    6 hours ago

    , , Canada Trend Micro Full time

    Join to apply for the Channel Account Manager role at Trend Micro. Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information across enterprises, governments, and consumers. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend harnesses AI to protect organizations and...

  • Channel Solutions Engineer

    6 hours ago

    , , Canada Trend Micro Full time

    5 days ago Be among the first 25 applicants Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information across enterprises, governments, and consumers. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend harnesses AI to protect organizations and individuals across...

  • Solutions Engineer

    6 hours ago

    , , Canada Trend Micro Full time

    Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information across enterprises, governments, and consumers. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend harnesses AI to protect organizations and individuals across clouds, networks, devices, and endpoints. The...

  • Junior Offensive Security Consultant

    4 weeks ago

    , , Canada Arancia Full time

    Location: Greater Toronto Area, CanadaEmployment Type: Full Time About Us: As a leading Cybersecurity Consulting firm based in Canada, we provide top-tier security services to clients globally. Our team comprises skilled professionals who deliver comprehensive security assessments for our clients. We are seeking an experienced Junior Offensive Security...

  • Integrated Marketing Manager- MSS background is a must

    6 days ago

    , , Canada SonicWall Full time

    Integrated Marketing Manager- MSS background is a must Remote, Canada SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the...

Cybersecurity Researcher

1 hour ago

Canada Safety Cybersecurity Full time
Our Mission

Safety secures the software supply chain for the world's data and development teams. We protect everywhere packages are actually used, from local developer machines to production environments, from traditional IDEs to AI coding assistants without disrupting existing workflows. Our mission is to make open source packaging secure by default, providing complete visibility, governance, and protection across Python, Java, and JavaScript ecosystems.

We're building the infrastructure that will secure companies and shape how enterprises adopt AI-driven development safely. If you're passionate about defending critical infrastructure at scale and want your work to directly protect millions of installations, we want you to join us.

The Role

As a Cybersecurity Researcher, you'll be the engine behind what makes Safety's security offering better than alternatives. Your research will directly contribute to protecting thousands of developers worldwide and millions of package installations across Python, Java, and JavaScript ecosystems.

You'll hunt malicious packages in real-time, enrich vulnerability data that powers our industry-leading database, and validate reachability analysis that tells customers exactly which vulnerabilities matter in their code. Your research becomes the intelligence layer behind Safety's Firewall. When you catch a malicious release, you're auto-blocking attacks before they reach production environments.

This isn't research in isolation. You'll work at the intersection of security analysis and product development, seeing your findings ship to customers within days. You'll develop detection rules that run against 70,000+ daily package releases, reduce false positives that improve customer trust, and contribute original research that positions Safety as a thought leader in supply chain security.

RequirementsWhat You'll Do

  • Hunt Malicious Packages: Analyze suspicious packages across PyPI, npm, and Maven in real-time, developing detection rules that protect customers before threats reach production

  • Enrich Vulnerability Data: Review and validate vulnerabilities, adding reachability analysis and context that makes Safety's database more accurate than baseline sources like OSV

  • Reduce False Positives: Refine our own tooling and the detection logic by analyzing flagged packages, documenting patterns, and optimizing rules to improve customer trust

  • Build AI-Driven Detection Systems: Collaborate with data engineers to develop LLM-assisted analysis tools and automated detection processes that scale to 70,000+ daily package releases

  • Drive Research Innovation: Experiment with AI-powered techniques for vulnerability detection, changelog analysis, and threat identification to stay ahead of emerging attacks

  • Ship with Velocity: Embrace fast-paced iteration, deliver detection improvements quickly, refine based on customer feedback, and see your work protect thousands of developers and environments within days

  • Establish Thought Leadership: Contribute original research through blog posts and conference presentations that position Safety as an industry leader in supply chain security

About You

  • Security Research Experience: multi-year experience in cybersecurity research with hands-on experience investigating both accidental vulnerabilities and intentionally malicious components in software supply chains

  • Ecosystem Expertise: Deep understanding of package ecosystems (PyPI, npm, Maven) including how they work, common attack vectors, and vulnerability patterns, with programming ability in Python, Java, or JavaScript

  • AI-Powered Analysis: Experience using LLMs (GPT, Claude, Copilot) for security research, code analysis, or threat detection. Comfortable experimenting with prompts and integrating AI into research workflows

  • Detection Development: Track record of building or improving automated security detection systems, including writing rules, reducing false positives, and scaling analysis to large datasets

  • Velocity & Collaboration: Comfortable working in fast-paced environments where research ships to production quickly, with strong communication skills for remote team collaboration

  • Mission-Driven: Passionate about protecting the open-source ecosystem and staying ahead of emerging threats in supply chain security

Bonus Points

  • Experience building or contributing to security tools, malware analysis frameworks, or threat intelligence platforms

  • Background in static analysis, dynamic analysis, or software composition analysis

  • Published security research, CVE discoveries, or conference presentations

  • Contributions to open-source security projects or vulnerability databases

  • Experience with data engineering pipelines or working closely with ML/data teams

BenefitsCompensation & Benefits

We prioritize supporting our team's growth, wellness, and success. Benefits include:

  • Competitive salary: 120,000 CAD - 150,000 CAD (depending on experience)

  • 20 days paid vacation per year

  • Private Healthcare Plan

  • Generous equity stock options to share in our success

  • Ability to work remotely and thrive in an adaptable, inclusive environment

  • Flexible working hours, providing responsibilities are effectively managed

Our Team Culture

We believe in building products that make a real difference in the security landscape. Our team values technical excellence, open collaboration, and continuous learning.

One of our core commitments to our team and the culture is fostering belonging. We're committed to fostering an inclusive environment where diverse perspectives are valued and everyone's growth is supported. We recognize the value diversity brings not only to us as individuals, but as an organization. And we go out of our way to make each other feel understood, respected, and supported.

Check out our Core Commitments here.

Our Commitment to Inclusion

We believe that diverse teams build better products. We actively and strongly encourage applications from individuals who identify as women, people of color, 2SLGBTQI+, Indigenous, First Nations, Inuit, Métis, people with disabilities, or as part of other marginalized and historically underrepresented groups.

If you're passionate about full-stack development, excited about cybersecurity, and want to work in an inclusive environment where your voice is heard and your growth is actively supported, we'd love to hear from you. Join us in our mission to make the digital world safer for everyone

Ready to Apply?

We're looking for people who are passionate about building secure, scalable solutions. Don't worry if you don't match every requirement – we value diverse backgrounds and perspectives. If you're excited about our mission and think you can contribute, we'd love to hear from you

We are committed to working with applicants requesting accommodations at any stage of the hiring process. If you require accommodations, please let us know.

Hiring Process Outline

Timeline: The process should roughly take 2 weeks, if scheduling and timing will allow for it.

  1. Short Screening Interview

  2. Core Commitment Interview with our VP of R&D

  3. Technical Interview with our Research team

  4. Interview with one of Safety's co-founders

Along the way, we'll talk through your background and interests to determine whether Safety is a good fit for your career goals.