Top Cyber Security Jobs in Vancouver

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Conduct red team operations, adversary simulations, penetration testing, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services; identify attack paths and configuration weaknesses; validate detection and response capabilities; track emerging attacker techniques; and drive remediation through concise reporting and stakeholder communication.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Conduct AI-driven security assessments across software, hardware, and firmware; develop AI-enabled offensive and defensive security tooling; identify and remediate vulnerabilities; test LLMs, agentic workflows, and cloud environments; and guide organization-wide AI security strategy. Partner with engineering and leadership, lead threat-modeling sessions, and communicate security findings and recommendations to senior stakeholders.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to stakeholders, build investigation tools and automated workflows, and improve security operations processes. The role requires Python scripting, SIEM experience, cloud security knowledge across AWS and GCP, and forensic analysis across macOS, Windows, and Linux.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the detection lifecycle, advance detection-as-code with Git, testing, CI/CD, and observability, and improve data ingestion and enrichment. Evaluate AI-assisted security capabilities, translate threat intelligence into detections, and partner with Security Operations during investigations and incident exercises. The role requires strong Python and SQL skills, SIEM expertise, AWS and Linux knowledge, and independent project leadership.

Conduct offensive security assessments and vulnerability research across Windows products, including code auditing, fuzzing, penetration testing, exploit development, and native-code analysis. Identify complex vulnerabilities and attack vectors, create proof-of-concept exploits, design scalable mitigations, and build reusable security tools and automation. Partner with Windows engineering teams to improve product architecture, security design, and defenses against emerging threats.

Manage and scale secure logging infrastructure, including OpenSearch clusters, ingestion pipelines, parsing, normalization, access controls, maintenance, and troubleshooting. Automate operational tasks, implement infrastructure as code, support SIEM development, and help design the next-generation logging platform. The role requires AWS, Linux, scripting, infrastructure automation, and security operations experience, with opportunities to work across teams on high-volume, tamper-resistant security data systems.

Lead architecture and platform strategy for Security Solutions, defining reusable patterns and prototypes. Partner with product, engineering, data science, and security to translate needs into scalable, secure architectures. Build proofs-of-concept, use AI-assisted coding, evaluate trade-offs, and drive cross-functional alignment to production readiness. Focus areas include agentic trust data, AI agents, cloud-native platforms, and security integrations.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Lead AI and security technology strategy for government customers, translating business priorities into Microsoft solution roadmaps. Build trusted relationships with technology executives, design AI transformation plans, develop initial agentic solutions, and orchestrate Microsoft and partner teams. Lead technical governance, consultative customer engagements, secure AI adoption, and commercial growth while applying industry knowledge to address customer opportunities, threats, and barriers.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Leads enterprise security, compliance, and IT operations, establishing a unified roadmap and team. Owns security posture, incident readiness, SOC 2, NIST, BSIMM, privacy, vendor reviews, data protection agreements, AI governance, access controls, employee technology, corporate system reliability, budgets, and audit readiness. Partners with engineering, product, sales, people teams, customers, and executive leadership to protect sensitive data and scale secure operations.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Lead and build the company’s information security program while initially owning IT operations. Responsibilities include protecting source code and hardware designs, securing developer infrastructure and software supply chains, managing identity and access, incident response, NIST 800-171 and CMMC compliance, export-control technical safeguards, AI and data governance, device management, networking, and IT scaling. The role is hands-on and partners closely with engineering, legal, compliance, vendors, and leadership.

Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.

Provides pre-sales technical support and technical account management for Vectra’s AI-driven cybersecurity platform. Responsibilities include customer discovery, product demonstrations, proofs of concept, security architecture guidance, technology reviews, integrations, deployment reviews, and technical relationship development. The role requires expertise in security platforms, networking, cloud security, incident response, attacker progression, and security processes, along with strong communication and large-account management skills. Regional travel is required as needed.

Design and implement security solutions across application, product, infrastructure, enterprise, and observability domains. Conduct threat modeling, embed security into engineering workflows, automate detections and incident response using AI, participate in on-call incident response, and support compliance efforts including SOC 2, ISO 27001, and PCI. Mentor engineers, influence security strategy, and collaborate with internal stakeholders and vendors in a regulated fintech environment.

Supports information security compliance programs, regulatory and framework assessments, risk mitigation, audit preparation, remediation tracking, policy maintenance, and security program improvements. The role coordinates evidence collection, manages risk exceptions and registers, monitors international regulations, supports penetration testing reviews, and maintains incident response and business continuity documentation. It also partners with Legal, auditors, stakeholders, and security leads to strengthen the organization’s security posture and compliance roadmap.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.