Top Cyber Security Jobs in Vancouver

Lead architecture and platform strategy for Security Solutions, defining reusable patterns and prototypes. Partner with product, engineering, data science, and security to translate needs into scalable, secure architectures. Build proofs-of-concept, use AI-assisted coding, evaluate trade-offs, and drive cross-functional alignment to production readiness. Focus areas include agentic trust data, AI agents, cloud-native platforms, and security integrations.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Lead AI and security technology strategy for government customers, translating business priorities into Microsoft solution roadmaps. Build trusted relationships with technology executives, design AI transformation plans, develop initial agentic solutions, and orchestrate Microsoft and partner teams. Lead technical governance, consultative customer engagements, secure AI adoption, and commercial growth while applying industry knowledge to address customer opportunities, threats, and barriers.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Own Klue’s platform engineering, infrastructure, Kubernetes, CI/CD, observability, security controls, compliance automation, and cloud cost optimization. Build reusable Pulumi components, operate GKE, improve developer self-service, reduce operational toil, strengthen software supply-chain security, and support SOC 2 readiness. The role requires hands-on production systems experience, on-call participation, strong cloud and Kubernetes expertise, and ownership of scalable internal platforms.

Oversee casino security, protect guests and employees, control facility access, monitor alarms, issue keys, maintain logs, write reports, investigate incidents, respond to inquiries, and provide first aid or medical assistance. The role requires customer service, gaming-regulation compliance, surveillance-equipment experience, physical restraint capability, flexible scheduling, and completion of applicable gaming security and provincial certification requirements.

Supports penetration testing requests, maintains the vulnerability register, prioritizes cybersecurity activities with stakeholders, and maintains security documentation and procedures. Assists with penetration test preparation, cybersecurity risk management tools, information security reviews, reporting, and follow-up. Requires foundational information security knowledge, relevant IT experience, a bachelor’s degree or equivalent background, and Canadian work eligibility. Quebec-based candidates must be bilingual.

Supports security incident response and security monitoring by analyzing SIEM alerts, triaging threats, escalating incidents, and providing Tier 2 and Tier 3 support. Develops dashboards and reports, operates web-filtering platforms, maintains secure and available systems, recommends security solutions, supports technology deployments, documents procedures, and promotes security awareness. The role requires SOC or incident-response experience, desktop environment knowledge, ticketing tools, technical writing, and Canadian work eligibility.

Lead detection, incident response, and digital forensics across macOS/Windows/Linux; act as Incident Commander, triage alerts, use SIEM, build investigation scripts and automated runbooks, collaborate with stakeholders on insider threat and security operations improvements.

Provides physical security for a casino facility, guests, team members, and company assets. Duties include patrols, access control, identification checks, incident reporting, cash escorts, surveillance, crowd control, guest escorts, lost-property handling, and regulatory compliance. The role requires flexible availability, prolonged standing and walking, and the ability to obtain a gaming license.

Lead detection and incident response across corporate security systems. Own investigations end-to-end, tune and automate detection (DLP, EDR, SIEM, phishing), produce runbooks and remediations, coach junior analysts, and partner cross-functionally to improve controls, compliance evidence, and AI-related security tooling.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Oversee casino security by monitoring the gaming floor, controlling facility access, protecting guests and employees, monitoring alarms, managing keys, writing reports, conducting investigations, and providing first aid when needed. The role requires customer service skills, gaming-regulation awareness, security training or licensing, physical restraint capability, flexible availability, and relevant certifications.

Oversee casino security by patrolling the property, controlling facility access, protecting guests and employees, escorting patrons and assets, investigating incidents, writing reports, and responding to guest inquiries. The role requires customer service, judgment, communication skills, physical restraint capability, and compliance with gaming regulations. First aid and medical assistance may also be provided when certified.

Operate corporate security tools and processes, including monitoring DLP alerts, reviewing EDR detections, triaging incidents, conducting investigations, and running phishing simulations. Maintain runbooks, support SOC 2 and ISO 27001 evidence collection, improve security tooling, and develop automation for remediation and unauthorized data-movement detection. The role collaborates across IT, application security, compliance, and people teams while supporting Clio’s security culture.

Leads end-to-end investigations of phishing, malware, insider threats, and other complex incidents across on-premises and cloud environments. Responsibilities include alert triage, malware analysis, host and network forensics, cloud incident investigation, containment, eradication, recovery, detection engineering, playbook development, escalation support, mentoring, and incident reporting.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Develop and maintain Android features and a shared C/C++ library integrated via the NDK. Perform complex maintenance, refactoring, performance optimizations, troubleshooting across platforms, and write clean, well-documented code while learning new technologies.