Top Cyber Security Jobs in Vancouver

Designs end-to-end solution architectures for digital products and platforms, translating business requirements into scalable technical designs. Defines integration strategies across enterprise applications, APIs, platforms, and third-party systems; evaluates technology options; supports AI, analytics, automation, and data initiatives; and considers security, governance, reliability, and scalability. Partners with product and engineering teams, guides implementation, and communicates architecture decisions to technical and non-technical stakeholders.

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Designs and develops advanced anti-cheat and game security systems for Call of Duty. Responsibilities include strengthening protection frameworks, creating cheat detection mechanisms, optimizing and debugging complex C++ systems, analyzing compiled code, and collaborating across studios. The role requires expertise in large-scale software development, algorithms, data structures, CI/CD, automation, performance tuning, and low-level systems, with preferred experience in game engines, reverse engineering, DevOps, cryptography, and anti-cheat technology.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Conduct red team operations, adversary simulations, penetration testing, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services; identify attack paths and configuration weaknesses; validate detection and response capabilities; track emerging attacker techniques; and drive remediation through concise reporting and stakeholder communication.

Investigate and respond to security incidents, conduct root cause analysis, and coordinate remediation. Lead vulnerability management across endpoints, servers, cloud, and networks; support threat hunting, security awareness, phishing simulations, policy enforcement, third-party cyber risk monitoring, metrics reporting, and security process automation. Collaborate with infrastructure, cloud, networking, and application teams while applying frameworks such as NIST CSF, ISO 27001, and MITRE ATT&CK.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Harden AWS cloud environments, CI/CD pipelines, container infrastructure, and software supply chains. Build CSPM remediation workflows, security guardrails, secrets remediation, container validation, and developer-facing controls. Partner with infrastructure and product teams to establish secure defaults, contribute to AI security standards and governance, participate in on-call operations, and improve runbooks and incident reviews.

Administer and secure server, cloud, virtualization, and network infrastructure through vulnerability remediation, patching, hardening, monitoring, and lifecycle management. Maintain EDR, MDR, and SIEM platforms; investigate and escalate security alerts; support compliance, risk assessments, and change management. Maintain cloud disaster recovery, backups, replication, restoration, and testing. Troubleshoot complex issues independently, coordinate remediation with technical teams and vendors, document security procedures, and provide senior technical guidance.

Conduct AI-driven security assessments across software, hardware, and firmware; develop AI-enabled offensive and defensive security tooling; identify and remediate vulnerabilities; test LLMs, agentic workflows, and cloud environments; and guide organization-wide AI security strategy. Partner with engineering and leadership, lead threat-modeling sessions, and communicate security findings and recommendations to senior stakeholders.

Own and scale LiveKit’s vulnerability management and security operations program. Responsibilities include selecting and operationalizing scanning tools, triaging vulnerabilities, assigning owners, setting remediation SLAs, building remediation dashboards, automating compliance evidence collection, and developing automation to reduce manual security work. The role partners closely with engineering and compliance teams to prioritize risk and accelerate remediation.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Leads cloud security architecture, governance, and implementation across Azure, AWS, GCP, and hybrid infrastructure. Designs Zero Trust frameworks, secure landing zones, identity and network controls, threat models, and cloud security testing. Automates controls using Terraform, Python, PowerShell, and policy-as-code, integrates security into CI/CD, manages cloud security platforms, drives remediation and compliance, and mentors engineering teams.

Operate and scale the application security program by maintaining security scanning tools, triaging and validating findings, prioritizing remediation, tracking vulnerabilities to closure, onboarding repositories, and improving documentation and processes. The role also involves communicating vulnerabilities to developers and performing basic Python scripting and automation under senior guidance.

Provide armed overnight security at county yards in Pacoima and South Los Angeles. Patrol properties, inspect gates, fencing, vehicles, and equipment; respond to alarms and incidents; contact emergency services; write daily reports; and assist county staff professionally. The role requires travel between both locations and includes a full-time schedule, benefits, training, and advancement opportunities.