Top Cyber Security Jobs in Vancouver

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Conduct red team operations, adversary simulations, penetration testing, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services; identify attack paths and configuration weaknesses; validate detection and response capabilities; track emerging attacker techniques; and drive remediation through concise reporting and stakeholder communication.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Administer and secure server, cloud, virtualization, and network infrastructure through vulnerability remediation, patching, hardening, monitoring, and lifecycle management. Maintain EDR, MDR, and SIEM platforms; investigate and escalate security alerts; support compliance, risk assessments, and change management. Maintain cloud disaster recovery, backups, replication, restoration, and testing. Troubleshoot complex issues independently, coordinate remediation with technical teams and vendors, document security procedures, and provide senior technical guidance.

Conduct AI-driven security assessments across software, hardware, and firmware; develop AI-enabled offensive and defensive security tooling; identify and remediate vulnerabilities; test LLMs, agentic workflows, and cloud environments; and guide organization-wide AI security strategy. Partner with engineering and leadership, lead threat-modeling sessions, and communicate security findings and recommendations to senior stakeholders.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to stakeholders, build investigation tools and automated workflows, and improve security operations processes. The role requires Python scripting, SIEM experience, cloud security knowledge across AWS and GCP, and forensic analysis across macOS, Windows, and Linux.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the detection lifecycle, advance detection-as-code with Git, testing, CI/CD, and observability, and improve data ingestion and enrichment. Evaluate AI-assisted security capabilities, translate threat intelligence into detections, and partner with Security Operations during investigations and incident exercises. The role requires strong Python and SQL skills, SIEM expertise, AWS and Linux knowledge, and independent project leadership.

Build and ship security tools for agentic AI workloads running on Kubernetes. Responsibilities include traffic interception, policy enforcement, runtime protection, workload discovery, and observability. The role involves developing production software with technologies such as eBPF, Go, Python, Cedar, agentgateway, OpenTelemetry, and ClickHouse, while owning features end to end in a fast-moving environment.

Protects guests, team members, facilities, and company assets in a casino environment. Duties include patrols, access control, incident reporting, transaction and cash escorts, identification checks, crowd control, surveillance, guest escorts, lost-and-found handling, and regulatory compliance. Requires flexible availability, security-related certifications, and eligibility for gaming licensing.

Conduct offensive security assessments and vulnerability research across Windows products, including code auditing, fuzzing, penetration testing, exploit development, and native-code analysis. Identify complex vulnerabilities and attack vectors, create proof-of-concept exploits, design scalable mitigations, and build reusable security tools and automation. Partner with Windows engineering teams to improve product architecture, security design, and defenses against emerging threats.

Provides senior technical leadership for application security incident response, customer escalations, threat mitigation, and complex web attacks. Analyzes traffic, logs, alerts, and attack payloads; designs security policies; mitigates DDoS, bot, zero-day, and web application attacks; performs forensic analysis; mentors engineers; collaborates with customers and product teams; documents findings; and develops automation to improve response efficiency.

Lead cloud security architecture across AWS and GCP, strengthening identity, access management, workload protection, encryption, secrets management, and secure deployment paths. Build Terraform and policy-as-code guardrails, improve cloud threat visibility and detection, support threat hunting and incident response, and drive strategic security initiatives across engineering teams. Provide technical leadership, mentorship, and guidance while delivering measurable security improvements at scale.

Manage and scale secure logging infrastructure, including OpenSearch clusters, ingestion pipelines, parsing, normalization, access controls, maintenance, and troubleshooting. Automate operational tasks, implement infrastructure as code, support SIEM development, and help design the next-generation logging platform. The role requires AWS, Linux, scripting, infrastructure automation, and security operations experience, with opportunities to work across teams on high-volume, tamper-resistant security data systems.

Provides cybersecurity, compliance, policy, and security architecture expertise for three Department of the Air Force ICAM studies. Interprets DoD and Federal mandates, evaluates Zero Trust, PKI, NPE governance, identity lifecycle, audit logging, and ATO requirements, conducts compliance gap analyses, and contributes to technical reports and acquisition documents. Advises engineers, architects, and program leaders on implementable security controls for classified and disconnected environments.

Serves as the primary security services contact for customers, guiding the integration and effective use of Akamai web security products. Collaborates with cross-functional and sales teams to understand customer needs, tune solutions, implement security and web technologies, and improve delivery methodologies. Requires expertise in internet protocols, CDN operation, web development, IT systems, security practices, consultative customer engagement, and project management. Must be able to obtain and maintain Canadian government clearance.

Lead architecture and platform strategy for Security Solutions, defining reusable patterns and prototypes. Partner with product, engineering, data science, and security to translate needs into scalable, secure architectures. Build proofs-of-concept, use AI-assisted coding, evaluate trade-offs, and drive cross-functional alignment to production readiness. Focus areas include agentic trust data, AI agents, cloud-native platforms, and security integrations.