Top Cyber Security Jobs in Vancouver

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. Secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, identity lifecycle automation, and policy guardrails. Builds monitoring for anomalous access, supports incident response, conducts threat modeling, and maintains reliable IAM services with on-call responsibilities. Requires substantial security engineering and IAM experience, knowledge of modern identity protocols, programming or scripting proficiency, and security automation expertise.

Designs, deploys, and operates security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premises systems. Secures AI agents and non-human workloads through authentication, authorization, networking, policy-as-code, infrastructure-as-code, and automation. Addresses prompt injection, data and model poisoning, AI supply-chain risks, and MCP integrations. Leads security initiatives, infrastructure hardening, governance, and cross-functional efforts while participating in on-call rotations.

Monitor, triage, and investigate security alerts across identity, endpoint, email, SaaS, and cloud environments. Conduct routine incident investigations, gather evidence, document findings, support major incident response, and contribute to containment and recovery. Improve runbooks, tune detections, develop small scripts and automated workflows, and participate in post-incident reviews. Communicate clearly with global teammates while developing technical skills in security operations, incident response, threat detection, and automation.

Build and operate Affirm’s insider threat program, including investigative standards, detection use cases, controls, metrics, and reporting. Support insider risk investigations through telemetry and evidence analysis, threat modeling, and written recommendations. Partner with Legal, HR, Privacy, and Compliance on case handling and regulatory obligations. Improve DLP, endpoint monitoring, access governance, and SaaS security controls. Automate evidence collection, case routing, triage, and investigation workflows using Python, automation platforms, and agentic AI.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

Leads Affirm’s global security incident response and investigations program. Responsibilities include serving as incident commander, directing technical investigations, managing and developing response engineers, establishing readiness practices, improving detection and response tooling, implementing AI-assisted investigation workflows, and translating incident metrics into executive and board-level reporting.

Own enterprise sales across Western Canada by expanding existing accounts, acquiring new logos, managing the full sales cycle, developing territory strategies, building channel relationships, forecasting pipeline, and closing technology deals. The role requires communicating networking, security, AI, and machine learning business value to executive and technical stakeholders while meeting revenue and pipeline targets.

Build and operate enterprise identity and access management systems at Affirm. Responsibilities include IAM lifecycle operations, access troubleshooting, automation, backend services, APIs, integrations, monitoring, and production support. The role focuses on SailPoint, Auth0, workforce identity events, secure infrastructure, and collaboration with Security, IT, and Engineering. Candidates should have software engineering experience, backend development skills, cloud familiarity, and knowledge of IAM technologies.

Leads Affirm’s third-party security risk management program, including international market due diligence, M&A security assessments, post-acquisition vendor integration, control evaluations, threat modeling, and remediation tracking. Designs automated workflows and integrations across GRC, ticketing, cloud, and identity systems using Python and agentic coding tools. Establishes processes, metrics, dashboards, and reporting while advising Legal, Procurement, Engineering, Finance, Compliance, Privacy, and leadership on security risks and decisions.

Provides administration, implementation, monitoring, and oversight of cloud-based cybersecurity systems. Responsibilities include incident response, vulnerability and compliance assessments, security audits, risk management, SIEM and network analysis, disaster recovery, security awareness training, phishing simulations, policy development, third-party risk assessments, and end-user technical support. The role also advises business stakeholders, supports security projects, evaluates technologies, and maintains system and network security procedures.

Supports TRIUMF’s research security and trade compliance programs by conducting OSINT due diligence, vetting stakeholders, managing risk assessments, reviewing mitigation plans, clearing exports, administering permits, and monitoring sanctions and export-control requirements. The role develops training and guidance, advises researchers and management, maintains compliance procedures, and coordinates with government agencies, logistics, finance, and research services teams.

Leads embedded software and firmware design, development, optimization, and troubleshooting for hardware products. Oversees complex firmware projects, coordinates internal and outsourced engineering teams, collaborates with hardware engineers, defines communication protocols and system requirements, reviews designs for quality and compliance, documents technical processes, introduces new technologies, and mentors less-experienced engineers.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build Neuromorphic Labs’ enterprise go-to-market engine from the ground up. Identify strategic customers and design partners, generate pipeline, lead complex sales cycles, convert pilots into commercial deployments, and close early enterprise accounts. Shape positioning, messaging, pricing, customer narratives, and product priorities based on market feedback. Establish scalable GTM processes, tools, metrics, and operating rhythms while partnering closely with the founder and technical teams.

Lead the definition, design, prototyping, and launch of a production AI trust platform MVP. Translate complex technical concepts into requirements, workflows, interfaces, prototypes, and execution plans. Drive ambiguous initiatives from concept through launch, collaborate deeply with engineering and architects, engage customers and design partners, and support demos, presentations, marketing content, and early adoption.

Owns threat detection and response capabilities across multi-cloud, SaaS, identity, and endpoint environments. Responsibilities include engineering resilient detection pipelines, developing MITRE ATT&CK-aligned detections, leading incident response and command, authoring playbooks, conducting post-incident reviews, integrating security automation and generative AI, and partnering with engineering and offensive security teams. The role also mentors peers and communicates security risks to executive stakeholders.

Manage internal operations across multiple 24/7 security sites, including scheduling, coverage, overtime, audits, SOPs, logistics, equipment, fleet records, employee administration, compliance, payroll issues, and quality assurance. The role requires rotating day and night availability, emergency coverage support, workforce scheduling expertise, strong Excel and systems aptitude, and knowledge of security operations, licensing, training, and documentation requirements.

Leads enterprise security architecture and cybersecurity solution sales, focusing on Microsoft technologies. Partners with sales and executive teams to qualify opportunities, develop differentiated security offerings, guide strategic sales through closure, and architect solutions. Builds pipelines, creates strategy plans and best practices, researches industry trends, facilitates workshops, presents to stakeholders, and serves as a cybersecurity subject matter expert.

Leads Cisco’s security solutions design and technical sales engineering team across Canada. Develops and executes security sales strategies, builds executive customer and partner relationships, presents business and technical value, and supports revenue growth. Oversees recruitment, mentoring, performance management, and solution development across identity, cloud, network, endpoint, XDR, SIEM, and SOAR capabilities. Partners with sales and cross-functional leadership to position Cisco security solutions competitively and deliver integrated architectures.

Designs and implements secure architectures across applications, infrastructure, cloud environments, and operations. Leads threat modeling, risk assessments, architecture reviews, security standards, compliance alignment, and security controls as code. Partners with engineering, product, DevOps, IT, and compliance teams to embed security into the SDLC, improve monitoring and incident response, evaluate security tools and vendors, and mentor technical teams. Requires expertise in cloud security, IAM, encryption, containers, infrastructure as code, DevSecOps, and security frameworks.

Develop and operate application-security automation for vulnerability ingestion, triage, prioritization, and remediation. Integrate CVE, SAST, secret-scanning, penetration-testing, bug-bounty, and IaC findings into unified pipelines. Build AI-assisted security workflows, automated fix processes, data services, dashboards, and scorecards. Partner with engineering teams on vulnerability remediation, root-cause analysis, secure development, and security awareness. Assist with incident response and continuously improve vulnerability management processes.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Manage corporate actions, security master records, and security pricing data for fund administration operations. Responsibilities include maintaining Bloomberg Terminal processes, researching corporate action documentation, creating and updating securities, validating pricing backups, documenting market data, resolving terminal issues, and improving workflows. The role requires strong fund operations knowledge, advanced Excel skills, attention to detail, independent prioritization, and collaboration with valuation and investor relations teams.

Monitor, investigate, and respond to cybersecurity incidents; perform root cause analysis and vulnerability management; coordinate remediation; run phishing simulations and security training; maintain incident response documentation, policies, and risk assessments; track security metrics; and support secure configurations across systems. The role requires knowledge of security frameworks, network protocols, cloud security, identity and access management, and security tools including SIEM, SOAR, EDR, DLP, and email security platforms.