Top Cybersecurity Jobs in Vancouver, BC

Leads Affirm’s global security incident response and investigations program. Responsibilities include serving as incident commander, directing technical investigations, managing and developing response engineers, establishing readiness practices, improving detection and response tooling, implementing AI-assisted investigation workflows, and translating incident metrics into executive and board-level reporting.

Build and operate enterprise identity and access management systems at Affirm. Responsibilities include IAM lifecycle operations, access troubleshooting, automation, backend services, APIs, integrations, monitoring, and production support. The role focuses on SailPoint, Auth0, workforce identity events, secure infrastructure, and collaboration with Security, IT, and Engineering. Candidates should have software engineering experience, backend development skills, cloud familiarity, and knowledge of IAM technologies.

Build and maintain customer identity and authentication services for registration, login, authorization, MFA, step-up authentication, and account lifecycle flows. Develop backend APIs in Python or Kotlin, integrate Okta, Auth0, and ForgeRock, write automated tests, participate in code reviews, deploy features, debug production services, improve reliability, and collaborate with engineering, product, and security teams under mentorship.

Leads Affirm’s third-party security risk management program, including international market due diligence, M&A security assessments, post-acquisition vendor integration, control evaluations, threat modeling, and remediation tracking. Designs automated workflows and integrations across GRC, ticketing, cloud, and identity systems using Python and agentic coding tools. Establishes processes, metrics, dashboards, and reporting while advising Legal, Procurement, Engineering, Finance, Compliance, Privacy, and leadership on security risks and decisions.

Lead the design, development, delivery, and operation of secure, scalable authentication platform capabilities, including sign-in, account recovery, MFA, session management, authorization, and identity federation. Collaborate with Product, Security, Fraud, Compliance, and engineering teams; improve reliability, monitoring, code quality, and security practices; resolve production issues; mentor engineers; and communicate technical decisions and trade-offs.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Supports application security across product and engineering teams by reviewing code, configurations, designs, vulnerabilities, and pull requests. Helps triage and prioritize security findings, provides remediation guidance, develops scripts and automation, and promotes secure coding practices. The role communicates risk to technical and non-technical stakeholders, collaborates cross-functionally, and develops offensive, defensive, and software engineering skills.

Design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle. Implement OAuth/OIDC/SAML/SCIM, develop APIs in Python/Kotlin, integrate identity platforms, automate deployments with IaC and CI/CD, and ensure secure, reliable, high-scale identity operations.