Top Cyber Security Jobs in Vancouver

Lead and own the information security program and security engineering at NEAR Foundation. Drive SOC 2 Type 2 and ISO 27001 readiness, run logging/monitoring/incident response, manage vulnerability and third-party risk, harden identity/access/endpoint stacks, automate security and compliance across SaaS, and advise on tooling and cloud security (AWS/GCP).

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Protect company employees, assets and customer freight by investigating theft and security incidents, conducting audits and inspections, implementing preventive security measures and procedures, ensuring cross-border compliance (CTPAT/PIP/AEO), delivering training, and collaborating with operations to reduce losses and maintain security standards across the regional network.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Work with the security team to triage vulnerabilities, operate vulnerability management, audit and refine IAM and access controls, improve CI/CD security checks, tune and automate SIEM alerting and log ingest, support security exercises, research security tools, and document findings.

Serve as the customer-facing security lead for Akamai product integrations, drive account team delivery and customer success, identify service improvements, manage technical projects and priorities, and communicate with internal and external stakeholders to ensure high-quality integration and support.

Deliver, integrate, maintain, and optimize Akamai-based web security solutions (CDN, WAF, API Security, Bot Management). Architect customer configurations, analyze web traffic and system architectures, remediate security issues, document technical work, collaborate with cross-functional teams, automate deployments using Terraform/Akamai CLI and scripting, and use tools like Burp Suite, Postman, and cURL for troubleshooting and validation.

Perform non-disruptive OT security assessments (tabletop and targeted testing) across ICS/SCADA environments, identify operationally relevant risk, advise clients on remediation and program improvements, and contribute to Packetlabs' OT methodology and team knowledge.

Define, govern, and maintain global security architecture spanning people, processes, data, and technology. Lead cloud security strategy for GCP and Azure migrations, embed security into CI/CD and containerization, develop guardrails for Generative AI/LLMs, conduct architecture reviews and assurance, implement security tools, produce technical design documentation, and ensure policies and controls align with risk tolerance and compliance frameworks.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Lead security engineering across application, infrastructure, and developer workflows: threat modeling, secure code reviews, vulnerability management, incident response, and building automation/tooling to harden APIs, deployments, and access controls while partnering with engineering teams.

Design and implement security controls across cloud, OS, Kubernetes, networks, and CI/CD. Audit infrastructure, perform threat modeling, remediate vulnerabilities, and write software for security features and defenses.

Design and implement security and privacy features across Tailscale's codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive mitigations to resolution, and spend significant time writing secure software (50%+ coding). Collaborate with engineering teams to promote secure coding and provide guidance and training.

Lead full‑stack development and reliability improvements for the Firefox Add‑ons ecosystem, building features, automated moderation pipelines, reviewer tools, and observability. Improve platform reliability, respond to incidents, and help keep the ecosystem safe and trustworthy. Collaborate across design, product, QA, and community contributors and contribute openly through PRs and code reviews.

Perform information security and risk activities including implementing and enforcing security controls, incident response, threat management, vulnerability scanning, malware management, intrusion detection, risk assessments, and backup/disaster recovery planning. Work on moderate-scope projects with general guidance and apply judgment within defined parameters.

Design and run automation-driven, AI-agent-assisted attack campaigns and red-team simulations against Wealthsimple products and infrastructure; build and improve automated testing pipelines, AI agents, and tooling; triage AI-generated findings into high-signal vulnerabilities; collaborate with platform engineers and AppSec to integrate adversarial testing into the SDLC and support remediation.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001, SOC 2), support audit execution and evidence collection, manage policy lifecycle, track remediation and internal audits, and partner with cross-functional teams to translate compliance requirements into practical controls and processes.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Partner with engineering and product teams to design, ship, and integrate scalable security solutions. Lead security reviews, threat modeling, and technical roadmaps, use metrics to drive risk reduction, mentor engineering teams, and leverage LLMs, CI/CD, and AI tooling to improve security at scale.

Perform application security and vulnerability management across web apps, APIs, cloud services and third-party components. Run SAST/DAST/SCA and web scans, coordinate penetration tests, validate and track remediation, and support security operations (EDR/DLP/SIEM/SOAR). Manage security awareness (KnowBe4), assist incident response, tune alerts, and collaborate with engineering, IT, and business stakeholders to reduce risk.

Lead and improve daily operations of Twilios Security Risk program: maintain risk registers and KRIs, perform qualitative and quantitative risk analyses, build dashboards and predictive models, coordinate remediation with engineering, support audits, and drive automation and AI-enabled risk tooling to scale program impact.

Design, implement, and operate security capabilities across endpoint, cloud, identity, and network environments. Build integrations and automation (scripting/APIs), extend vendor platforms, improve interoperability, monitor and optimize security services, and partner with engineering and IT teams to embed secure, scalable controls that reduce risk.