Top Cyber Security Jobs in Vancouver

Build and maintain customer identity and authentication services for registration, login, authorization, MFA, step-up authentication, and account lifecycle flows. Develop backend APIs in Python or Kotlin, integrate Okta, Auth0, and ForgeRock, write automated tests, participate in code reviews, deploy features, debug production services, improve reliability, and collaborate with engineering, product, and security teams under mentorship.

Build Revel’s security program from the ground up, securing its product, infrastructure, cloud, on-premises, hardware-integrated environments, and software delivery pipelines. Responsibilities include threat modeling, security architecture, Infrastructure as Code, detection and incident response, vulnerability management, compliance with ITAR/NIST/CUI/CMMC requirements, customer security reviews, and security enablement. The role will establish foundational processes and may eventually lead a growing security team.

Leads Affirm’s third-party security risk management program, including international market due diligence, M&A security assessments, post-acquisition vendor integration, control evaluations, threat modeling, and remediation tracking. Designs automated workflows and integrations across GRC, ticketing, cloud, and identity systems using Python and agentic coding tools. Establishes processes, metrics, dashboards, and reporting while advising Legal, Procurement, Engineering, Finance, Compliance, Privacy, and leadership on security risks and decisions.

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build Neuromorphic Labs’ enterprise go-to-market engine from the ground up. Identify strategic customers and design partners, generate pipeline, lead complex sales cycles, convert pilots into commercial deployments, and close early enterprise accounts. Shape positioning, messaging, pricing, customer narratives, and product priorities based on market feedback. Establish scalable GTM processes, tools, metrics, and operating rhythms while partnering closely with the founder and technical teams.

Lead the definition, design, prototyping, and launch of a production AI trust platform MVP. Translate complex technical concepts into requirements, workflows, interfaces, prototypes, and execution plans. Drive ambiguous initiatives from concept through launch, collaborate deeply with engineering and architects, engage customers and design partners, and support demos, presentations, marketing content, and early adoption.

Lead hardware and embedded security across Motive devices and connected cloud infrastructure. Build security baselines for boot chains, firmware, FOTA, manufacturing, and device lifecycles. Partner with hardware engineering to prioritize and remediate findings, conduct architecture reviews, threat modeling, and security testing, and define security requirements for platforms, interfaces, debug capabilities, provisioning, and lifecycle controls.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

Leads account managers and multi-site security operations in Burnaby, managing client relationships, contract performance, staffing, budgets, KPIs, audits, escalations, billing, and service quality. Oversees site supervisors and frontline teams, develops employees, conducts site visits, drives continuous improvement, ensures contract compliance, and supports client retention and financial performance. The role requires substantial experience in security, facilities, property, or other multi-site contract services.

Evaluates and audits security controls, policies, and procedures against standards including SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS. Develops compliance frameworks, policies, standards, and safeguards; conducts risk assessments; recommends mitigation strategies; monitors effectiveness; and prepares audit, compliance, and corrective-action reports for management and stakeholders.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Designs and develops advanced anti-cheat and game security systems for Call of Duty. Responsibilities include strengthening protection frameworks, creating cheat detection mechanisms, optimizing and debugging complex C++ systems, analyzing compiled code, and collaborating across studios. The role requires expertise in large-scale software development, algorithms, data structures, CI/CD, automation, performance tuning, and low-level systems, with preferred experience in game engines, reverse engineering, DevOps, cryptography, and anti-cheat technology.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Manages internal security operations across scheduling, logistics, HR administration, compliance, quality assurance, equipment, uniforms, fleet tracking, audits, and incident reporting. Coordinates staffing coverage, employee documentation, certifications, onboarding, disciplinary processes, site procedures, and operational support. Requires security-industry experience, knowledge of integrated security systems, strong organizational and communication skills, advanced computer proficiency, and the ability to lead people and manage competing priorities.

Leads endpoint security engineering teams and oversees enterprise endpoint protection platforms, operational readiness, policy enforcement, platform health, security initiatives, governance, risk management, vendor relationships, and capability roadmaps. Manages team performance, backlogs, projects, metrics, incident troubleshooting, audits, and continuous improvement while partnering with infrastructure, architecture, workplace technology, and security operations stakeholders.

Own security operations, detection engineering, and incident response across Workleap and ShareGate. Build automated AI-agent systems to triage, enrich, investigate, and route findings; define agent trust and evaluation models; reduce false positives; develop detections as code mapped to MITRE ATT&CK; lead incident response and postmortems; and partner with developers and managed detection providers. The role focuses on Azure cloud security, identity and attack paths, prompt-injection defenses, and secure agent permissions.

Leads secure code reviews across web, mobile, API, embedded, and cryptographic systems; identifies vulnerabilities and provides actionable remediation guidance. Conducts application penetration testing, threat modeling, secure design reviews, and SDLC advisory engagements. Serves as a senior technical client representative, mentors consultants, contributes to AppSec methodologies and research, supports pre-sales, and participates in industry events and published security research.

Leads Insurity’s enterprise cybersecurity, information security, privacy, HIPAA, AI governance, risk, compliance, and incident response programs. The CISO sets security strategy, advises executives and the Board, oversees cloud and application security, manages audits and third-party risk, directs major incidents, protects regulated data, and builds a scalable security organization. The role also embeds security into product development, DevOps, AI adoption, customer assurance, and business operations.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.