Posting Reason:

Replacement of a regular position

Job Type:

Employee

Anticipated Duration in Months (for contracts and temporary assignments):

N/A

Job Family:

IT Security

# of Open Positions:

1

Faculty/Service - Department:

IT Services and Infrastructure

Campus:

Main Campus

Union Affiliation:

N/A

Date Posted (YYYY/MM/DD):

2026/06/09

Applications must be received BEFORE (YYYY/MM/DD):

2026/08/23

Hours per week:

35

Salary Grade:

Non-Union Grade NC8 - 35 hrs

Salary Range:

$96,570.00 - $120,712.00

Position Purpose

Reporting to the Senior Manager, IT Security, the incumbent develops, implements, upgrades, integrates, tests, manages, and supports information security systems and applications. Performs real-time analysis and correlation of logs/alerts from a multitude of infrastructure, network, and security devices with a focus on the determination of whether said events constitute infrastructure, network, or security incidents. Responsible for researching and documenting various mitigation strategies. Provides information security education to the University community and prioritizes remediation of issues in a highly complex environment with critical uptime requirements.

In this role, your responsibilities will include:

• Security Administration and Platforms: Implement, operationalize, customize, configure, program, test, and maintain complex security systems, platforms, and solutions using multiple technologies. Provide technical recommendations for improving IT security infrastructure and assists in the coordination of audit and compliance requirements
• Analytics and Monitoring: Monitor a wide variety of IT assets, network, and data to ensure the prevention of events that negatively impact confidentiality, availability, and integrity. Build/manage reports and analyze logs and messages to identify and report possible security violations. Collect and analyse performance reports for various systems, and report trends in hardware and application performance to assist senior technical personnel to predict future issues or outages.
• Development: Develop program code/scripts according to technical standards and security policies. Build/develop use cases for Security and/or Network Operations Centre.
• Vulnerability Assessments and Penetration Testing: Perform ongoing vulnerability assessments and penetration testing of systems and networks to ensure compliance with security policies, standards, and procedures. Interface with IT teams on implementing controls.

What you will bring:

• University degree in Computer Science, Management Information Systems (MIS) or related field or an equivalent combination of education and experience.
• Minimum 5 years of experience in a complex and diverse IT environment demonstrating experience in IT security.
• Experience in application security, PeopleSoft security, Web Application Firewall technologies, security applications, and DevSecOps practices.
• Knowledge of secure coding, vulnerability management, OWASP Top 10, and secure software development lifecycle principles.
• Ability to collaborate with developers, technical teams, and business stakeholders to identify application security risks and support remediation activities.
• Experience implementing and supporting large-scale, end-to-end information security systems in a multi-platform environment.
• Experience with security technologies such as various monitoring and log aggregation platforms (Splunk is an asset), penetration testing frameworks, operating systems, vulnerability scanners, and endpoint security solutions.
• Knowledge of various programming languages and scripting languages and of computing hardware, software and software development methodologies.
• Experience with writing queries, parsing and correlating data, and various query languages (e.g. SQL).
• In-depth analytical skills for complex problem solving 6 identification, diagnosis, resolution.
• Knowledge of Incident Handling phases.
• Knowledge of the University9s information technology and security policies, procedures and standards would be considered an asset.
• Excellent verbal and written communication skills.
• Information security certifications would be an asset (e.g.: SANS, EC-Council, ISC2).
• Ability to work a flexible schedule including occasional weekends and evenings.
• Bilingual: French and English, spoken and written.

#LI-Hybrid #LI-DP1

Key Competencies at uOttawa:
Here are the required competencies for all or our employees at uOttawa:

Planning: Organize in time a series of actions or events in order to realize an objective or a project. Plan and organize own work and priorities in regular daily activities.
Initiative: Demonstrate creativity and initiative to suggest improvements and encourage positive results. Is proactive and self-starting. Show availability and willingness to go above and beyond whenever it is possible.
Client Service Orientation: Help or serve others to meet their needs. This implies anticipating and identifying the needs of internal and external clients and finding solutions on how to meet them.
Teamwork and Cooperation: Cooperate and work well with other members of the team to reach common goal(s). Accept and give constructive feedback. Able to adjust own behaviour to reach the goals of the team.