Security Policy
We implement robust security measures to protect your data and maintain the integrity of our platform.
Jobs.ca takes the security of your personal and business information seriously. We implement a combination of technical, administrative, and organizational safeguards to protect our systems and the data entrusted to us by job seekers, employers, and partners.
1. Technical Security Measures
1.1 Secure Data Transmission (SSL/TLS)
- HTTPS is enforced across all Jobs.ca websites and job boards
- SSL certificates are regularly maintained and renewed
- All form submissions, login credentials, and sensitive actions are encrypted in transit
1.2 Data Encryption at Rest
- Passwords are hashed using secure one-way encryption algorithms (e.g. bcrypt or Argon2)
- Sensitive fields (e.g. payment tokens, AI session data) are encrypted using AES-256
- Encryption keys are stored separately in secure key management systems (KMS)
1.3 Firewall Protection
- Configured to block unauthorized access and suspicious activity
- Detection of attack vectors (e.g. DDoS, SQL injection, XSS)
- Automated anomaly detection tools in place
1.4 Cloud Infrastructure
- Hosted on providers like AWS and Google Cloud
- Network segmentation, DDoS protection, physical security controls
- Production systems isolated from development/test environments
1.5 Authentication
- Strong password enforcement and hashing
- Optional 2FA for employer/admin access
- Role-based access control (RBAC) with audits
Continuous Security Improvement
We continuously upgrade our security measures in response to new threats, regulations, and ethical hacking feedback.
2. Account Protection
2.1 Login & Credential Safeguards
- Strong password complexity requirements
- One-way password hashing (e.g., bcrypt)
- Temporary account lockouts on multiple failed logins
2.2 Two-Factor Authentication (2FA)
- Optional 2FA via TOTP apps like Google Authenticator
- Strongly recommended for all employer/admin accounts
2.3 Phishing & Social Engineering Protection
- Email domain authentication (@jobs.ca only)
- AI-based phishing detection on posts and messages
- Alerts for suspicious logins or account activity
Reminder: Never share passwords, resume download links, or verification codes — even with people claiming to be Jobs.ca staff.
3. Vulnerability Reporting & Disclosure
3.1 How to Report a Vulnerability
If you find a vulnerability, please report it confidentially:
Email: service@jobs.ca
Subject: "Vulnerability Report – [Short Title]"
Include:
- Description, steps to reproduce, potential impact
- Screenshots/logs (if safe), your contact (or alias)
Do not publicly disclose until we confirm it's resolved.
3.2 Responsible Disclosure Guidelines
- Act in good faith and within the law
- Avoid harming systems or users
- Don't access/alter non-your data
- Avoid automated tools that degrade performance
Jobs.ca won't pursue legal action against ethical researchers acting responsibly.
3.3 Our Commitment
- Acknowledge report in 72 hours
- Initial review within 5–10 business days
- Notify you of progress
4. Job Seeker & Employer Safety
4.1 Fake Job Detection
- AI and manual moderation scan for scams or misleading listings
- Essential Sync validated against source career sites
4.2 Employer Verification
- Domain and business checks
- Manual reviews for low-reputation or high-volume posters
4.3 Prohibited Activities
- MLMs, crypto scams, adult services, fake remote jobs
- Charging job seekers to apply or interview
- Misleading or off-platform solicitations
Violators may be banned and reported to authorities.
4.8 Safety Best Practices
For Job Seekers
- Never pay to apply
- Don't share SIN or banking info
- Watch for high-pressure scams
For Employers
- Verify identity before offers
- Don't share sensitive internal info via email
- Report any impersonation attempts
Need Help?
To report a security concern or threat:
Mailing Address:
3450 Uptown Blvd, Victoria, BC V8Z 0B9
228,330 jobs available in Canada
Made with in Canada