Top Cyber Security Jobs in Vancouver

Lead architecture and platform strategy for Security Solutions, defining reusable patterns and prototypes. Partner with product, engineering, data science, and security to translate needs into scalable, secure architectures. Build proofs-of-concept, use AI-assisted coding, evaluate trade-offs, and drive cross-functional alignment to production readiness. Focus areas include agentic trust data, AI agents, cloud-native platforms, and security integrations.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

The Senior Security Engineer I will build and maintain core security infrastructure, collaborate with global teams, mentor junior engineers, and drive security initiatives.

The Senior Security Engineer will lead Samsara's Enterprise Security initiatives, build security infrastructure, mentor engineers, and manage security integrations across teams.

Develop and maintain Android features and a shared C/C++ library integrated via the NDK. Perform complex maintenance, refactoring, performance optimizations, troubleshooting across platforms, and write clean, well-documented code while learning new technologies.

Lead detection and response efforts: build detections, manage SIEM and orchestration tooling, deploy AI in SOC workflows, investigate incidents across AWS/EKS environments, support threat modeling and vulnerability scanning, and take on-call shifts.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, automate GRC workflows with Python and agentic coding tools, maintain integrations across ticketing and risk platforms, and develop dashboards and reporting. Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to support risk-informed decisions and mature security governance processes.

Supports application security across product and engineering teams by reviewing code, configurations, designs, vulnerabilities, and pull requests. Helps triage and prioritize security findings, provides remediation guidance, develops scripts and automation, and promotes secure coding practices. The role communicates risk to technical and non-technical stakeholders, collaborates cross-functionally, and develops offensive, defensive, and software engineering skills.

Lead detection, incident response, and digital forensics across macOS/Windows/Linux; act as Incident Commander, triage alerts, use SIEM, build investigation scripts and automated runbooks, collaborate with stakeholders on insider threat and security operations improvements.

Leads enterprise security architecture across IAM, cloud, applications, SaaS, SIEM, PAM, and third-party solutions. Develops security strategies, reference architectures, standards, roadmaps, risk assessments, and secure solution designs. Conducts architecture reviews, identifies control gaps, guides remediation, leads complex cybersecurity initiatives, and advises senior stakeholders. Partners across security, infrastructure, cloud, application, data, vendor, and business teams while promoting Security-by-Design, Zero Trust, threat modeling, and risk-based decision-making.

Lead product strategy and execution for Cluster Linking to deliver one-click disaster recovery, streamlined migrations, and secure cross-organization stream sharing. Drive adoption, packaging, pricing, customer engagement, and cross-functional alignment to grow the product.

The Director of Product Management will lead product strategy across infrastructure, software enablement, and customer-facing platforms, enhancing both technical and user experience while managing a team of product managers.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Investigate and respond to security incidents, conduct root cause analysis, and coordinate remediation. Lead vulnerability management across endpoints, servers, cloud, and networks; support threat hunting, security awareness, phishing simulations, policy enforcement, third-party cyber risk monitoring, metrics reporting, and security process automation. Collaborate with infrastructure, cloud, networking, and application teams while applying frameworks such as NIST CSF, ISO 27001, and MITRE ATT&CK.

Own security for Spade's production edge: manage PKI and mutual-TLS certificate lifecycle, design private network connectivity and webhook delivery security, drive vulnerability remediation, codify secure-build standards, and collaborate across engineering and product to improve overall security posture.

Lead multi-year product strategy for non-human identity and security across MongoDB Atlas, core DB engine, and developer platforms. Drive workload identity federation, passwordless/zero-trust access, MCP/AI agent authorization, developer-first access management, partner with engineering, UX, and GTM to prioritize and measure adoption, and represent MongoDB at industry events and customer briefings.