Top Cyber Security Jobs in Vancouver

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to stakeholders, build investigation tools and automated workflows, and improve security operations processes. The role requires Python scripting, SIEM experience, cloud security knowledge across AWS and GCP, and forensic analysis across macOS, Windows, and Linux.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the detection lifecycle, advance detection-as-code with Git, testing, CI/CD, and observability, and improve data ingestion and enrichment. Evaluate AI-assisted security capabilities, translate threat intelligence into detections, and partner with Security Operations during investigations and incident exercises. The role requires strong Python and SQL skills, SIEM expertise, AWS and Linux knowledge, and independent project leadership.

Lead architecture and platform strategy for Security Solutions, defining reusable patterns and prototypes. Partner with product, engineering, data science, and security to translate needs into scalable, secure architectures. Build proofs-of-concept, use AI-assisted coding, evaluate trade-offs, and drive cross-functional alignment to production readiness. Focus areas include agentic trust data, AI agents, cloud-native platforms, and security integrations.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Lead AI and security technology strategy for government customers, translating business priorities into Microsoft solution roadmaps. Build trusted relationships with technology executives, design AI transformation plans, develop initial agentic solutions, and orchestrate Microsoft and partner teams. Lead technical governance, consultative customer engagements, secure AI adoption, and commercial growth while applying industry knowledge to address customer opportunities, threats, and barriers.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead identity and access security across a global portfolio, including authentication, authorization, non-human identities, PAM, JIT access, and Cloudflare ZTNA. Design Okta policies, integrate endpoint and SaaS security signals, manage identity governance and compliance, and automate security workflows using infrastructure-as-code, scripting, and AI tooling. Influence cross-functional teams, modernize access controls, and drive complex security initiatives to completion.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Respond to security and system-health incidents for Imperva Cloud Application Security, provide monitoring, configuration, integration and post-sales support, analyze traffic and attack data to tune policies, consult internal teams, produce reports and automation, and participate in customer reviews and occasional on-call weekends.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Own Klue’s platform engineering, infrastructure, Kubernetes, CI/CD, observability, security controls, compliance automation, and cloud cost optimization. Build reusable Pulumi components, operate GKE, improve developer self-service, reduce operational toil, strengthen software supply-chain security, and support SOC 2 readiness. The role requires hands-on production systems experience, on-call participation, strong cloud and Kubernetes expertise, and ownership of scalable internal platforms.

Oversee casino security, protect guests and employees, control facility access, monitor alarms, issue keys, maintain logs, write reports, investigate incidents, respond to inquiries, and provide first aid or medical assistance. The role requires customer service, gaming-regulation compliance, surveillance-equipment experience, physical restraint capability, flexible scheduling, and completion of applicable gaming security and provincial certification requirements.

Supports security incident response and security monitoring by analyzing SIEM alerts, triaging threats, escalating incidents, and providing Tier 2 and Tier 3 support. Develops dashboards and reports, operates web-filtering platforms, maintains secure and available systems, recommends security solutions, supports technology deployments, documents procedures, and promotes security awareness. The role requires SOC or incident-response experience, desktop environment knowledge, ticketing tools, technical writing, and Canadian work eligibility.

Lead detection, incident response, and digital forensics across macOS/Windows/Linux; act as Incident Commander, triage alerts, use SIEM, build investigation scripts and automated runbooks, collaborate with stakeholders on insider threat and security operations improvements.

Lead detection and incident response across corporate security systems. Own investigations end-to-end, tune and automate detection (DLP, EDR, SIEM, phishing), produce runbooks and remediations, coach junior analysts, and partner cross-functionally to improve controls, compliance evidence, and AI-related security tooling.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Oversee casino security by patrolling the property, controlling facility access, protecting guests and employees, escorting patrons and assets, investigating incidents, writing reports, and responding to guest inquiries. The role requires customer service, judgment, communication skills, physical restraint capability, and compliance with gaming regulations. First aid and medical assistance may also be provided when certified.

Oversee casino security by monitoring the gaming floor, controlling facility access, protecting guests and employees, monitoring alarms, managing keys, writing reports, conducting investigations, and providing first aid when needed. The role requires customer service skills, gaming-regulation awareness, security training or licensing, physical restraint capability, flexible availability, and relevant certifications.

Operate corporate security tools and processes, including monitoring DLP alerts, reviewing EDR detections, triaging incidents, conducting investigations, and running phishing simulations. Maintain runbooks, support SOC 2 and ISO 27001 evidence collection, improve security tooling, and develop automation for remediation and unauthorized data-movement detection. The role collaborates across IT, application security, compliance, and people teams while supporting Clio’s security culture.

Leads end-to-end investigations of phishing, malware, insider threats, and other complex incidents across on-premises and cloud environments. Responsibilities include alert triage, malware analysis, host and network forensics, cloud incident investigation, containment, eradication, recovery, detection engineering, playbook development, escalation support, mentoring, and incident reporting.