Senior Security Engineer

Job Description: Senior Security Engineer
Department: Engineering
Location: Greater Vancouver Area, BC (Hybrid – 1–3 days per week in-office)

Employment Type: Full-Time

Our Business
Our client is a leading Enterprise SaaS FinTech company that allows financial institutions to deploy embedded financial products and services, creating a seamless banking connection for their corporate clients. The platform aims to provide instant scale and reach for banks looking to remove friction and add value, enabling their commercial banking clients to access banking services through their preferred ERP / accounting platform.

Headquartered in the Greater Vancouver Area, our client is on a mission to create the best product in the FinTech industry and fundamentally change the way that companies bank. As a recognized market leader in ERP Banking, they partner with some of the world’s largest Tier 1 banks to optimize and secure high-value financial ecosystems.

We are looking for dynamic and passionate individuals to join their high-performance team and contribute to their rapid growth and exciting journey.

Position Overview
As a Senior Security Engineer, you will provide leadership, expertise, and advanced security analysis capabilities within our client's security operations. Operating at a senior level, you will be deeply involved with the organization’s cyber security strategic plans and critical decision-making. You will contribute to the continuous improvement of their security posture, from fine-tuning the SIEM and managing cloud firewalls to implementing Zero Trust Architecture, securing CI/CD pipelines, and defending against emerging AI-driven threats.

You will champion an automation-first and AI-augmented mindset. By continuously leveraging Infrastructure as Code (IaC) and AI tooling, you will scale, accelerate, and optimize security operations across the board.

Note: This role operates on a hybrid schedule, requiring you to be in the downtown office 1–3 days per week.

Key Responsibilities
Embed Automation & AI Enhancement: Continually leverage generative AI, scripting, and Infrastructure as Code (IaC) across all tasks—from incident triage to playbook creation—to reduce manual toil, accelerate decision-making, and scale security operations.

Security Operations Leadership: Lead and oversee day-to-day security operations, utilizing AI-assisted analysis to ensure rapid and proper coordination of response with all parties of interest.

SLA Management: Ensure all incident tickets are assigned accordingly and resolved while establishing and complying with operations SLAs.

Threat Detection & Modeling: Improve alert signal-to-noise ratios, integrate external threat intel with security monitoring tools, and utilize AI tools to assist in rapid rule generation and threat modeling.

SIEM Optimization: Continuously fine-tune the SIEM to reduce false positives, leveraging advanced ML/AI capabilities where available to ensure pertinent data sources are onboarded and adequately parsed.

AI Risk Mitigation: Identify, assess, and mitigate emerging AI risks, with a specific focus on vulnerabilities related to cloud-based AI services and agent-based AI architectures.

Cloud & Infrastructure Security: Manage and secure cloud environments using cloud firewalls and endpoint/CSPM platforms; deploy and maintain Zero Trust Architecture (ZTA).

Edge & SaaS Protection: Administer edge protections (DDoS mitigation, WAF, CDN) and secure user SaaS-based tools (Google Workspace, Atlassian, Slack).

Endpoint & Lifecycle Security: Manage Mac-based laptop and mobile device management (MDM) platforms, and maintain comprehensive DNS and mail security/monitoring.

Application Security: Integrate and manage security within the CI/CD pipeline (DAST, SAST, SCA) and secure the software development lifecycle across repositories and containerized environments.

Documentation & Mentorship: Lead the development of incident playbooks and security procedures, and mentor junior personnel within the security team.

Skills & Experience Required
Communication: Strong written and verbal English communication skills, with a proven ability to break down intricate security risks for both technical and non-technical audiences.

Education & Experience: Degree in information technology, computer science, cybersecurity, or a related field, alongside 5+ years of experience in security analysis, incident response, or a related domain.

Certifications: AWS Security Certification or equivalent experience. Relevant industry certifications such as CISSP, CISM, GCIH, or OSCP are highly desirable.

Technical Core: In-depth knowledge of security principles, network protocols, operating systems, and common vulnerabilities.

Automation & Architecture: Proven experience applying Infrastructure as Code (IaC) principles, automation scripting, and containerization/orchestration platforms (Kubernetes, Helm, Docker).

Frameworks & Compliance: Knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory requirements (PCI DSS, GDPR).

AI Threat Landscape: Understanding of the threat landscape surrounding AI technologies, specifically evaluating and securing cloud and agent-based models.

Specific Technology Stack Experience
(Experience with equivalent or similar tools is completely acceptable)

Logging & SIEM: Splunk

Cloud & Endpoint: CrowdStrike (Host and CSPM), AWS Security, Cloud Firewalls (AWS/Fortinet)

Automation & IaC: Terraform, CloudFormation, Ansible, or similar frameworks; scripting in Python, Bash, etc.

Containers: Kubernetes, Helm, Docker

Pipeline Security: Sonarcloud, Snyk, GitHub, Quay, Artifactory

Network & Edge: Cloudflare/CloudFront (DDoS, WAF, CDN), ZScaler (ZTA)

Vuln Management: TenableIO

SaaS & Email: Proofpoint, Google Workspace, Atlassian, Slack

Device Management: Mac-based MDM systems (e.g., Kandji)

Why Work With Us?
Visionary Team, Proven Results: The leadership bench brings deep, collective experience in scaling high-growth FinTech companies through major funding cycles. This expertise creates a stable foundation, allowing you to focus on building, innovating, and expanding your professional network.

Accelerated Career Ownership & DEI: As an emerging high-growth company, career trajectories here are accelerated. Employees are immediately given a high level of ownership and autonomy over complex, impactful projects within an inclusive environment that actively works to eliminate bias.

Strategic Total Rewards & Wellbeing: Competitive compensation packages designed with a semi-annual bonus plan. Benefits include top-tier corporate hardware setups, modern office perks, a family leave top-up program, and a flexible Work-From-Anywhere policy.

Purpose-Driven Culture: Fostering strong, collaborative bonds built on Trust and Candor. The team enjoys premium office amenities, fully stocked kitchens, weekly catered team lunches, and daily premium local coffee perks.

Compensation Package
The hiring salary range for this position is $130,000 - $160,000 annually. The base pay offered is based on comparable market data from companies of similar employee size, revenue, and location. Permanent employees in this position may be eligible for a competitive semi-annual bonus program, subject to program eligibility requirements.

Additional Rewards Offerings Include:

Extended health and dental benefits

Paid time off

Savings and retirement plan matching

Parenthood top-up programs

Mentorship initiatives and leadership series

Advantages
Our Business
Our client is a leading Enterprise SaaS FinTech company that allows financial institutions to deploy embedded financial products and services, creating a seamless banking connection for their corporate clients. The platform aims to provide instant scale and reach for banks looking to remove friction and add value, enabling their commercial banking clients to access banking services through their preferred ERP / accounting platform.

Headquartered in the Greater Vancouver Area, our client is on a mission to create the best product in the FinTech industry and fundamentally change the way that companies bank. As a recognized market leader in ERP Banking, they partner with some of the world’s largest Tier 1 banks to optimize and secure high-value financial ecosystems.

We are looking for dynamic and passionate individuals to join their high-performance team and contribute to their rapid growth and exciting journey.

Responsibilities
Key Responsibilities
Embed Automation & AI Enhancement: Continually leverage generative AI, scripting, and Infrastructure as Code (IaC) across all tasks—from incident triage to playbook creation—to reduce manual toil, accelerate decision-making, and scale security operations.

Security Operations Leadership: Lead and oversee day-to-day security operations, utilizing AI-assisted analysis to ensure rapid and proper coordination of response with all parties of interest.

SLA Management: Ensure all incident tickets are assigned accordingly and resolved while establishing and complying with operations SLAs.

Threat Detection & Modeling: Improve alert signal-to-noise ratios, integrate external threat intel with security monitoring tools, and utilize AI tools to assist in rapid rule generation and threat modeling.

SIEM Optimization: Continuously fine-tune the SIEM to reduce false positives, leveraging advanced ML/AI capabilities where available to ensure pertinent data sources are onboarded and adequately parsed.

AI Risk Mitigation: Identify, assess, and mitigate emerging AI risks, with a specific focus on vulnerabilities related to cloud-based AI services and agent-based AI architectures.

Cloud & Infrastructure Security: Manage and secure cloud environments using cloud firewalls and endpoint/CSPM platforms; deploy and maintain Zero Trust Architecture (ZTA).

Edge & SaaS Protection: Administer edge protections (DDoS mitigation, WAF, CDN) and secure user SaaS-based tools (Google Workspace, Atlassian, Slack).

Endpoint & Lifecycle Security: Manage Mac-based laptop and mobile device management (MDM) platforms, and maintain comprehensive DNS and mail security/monitoring.

Application Security: Integrate and manage security within the CI/CD pipeline (DAST, SAST, SCA) and secure the software development lifecycle across repositories and containerized environments.

Documentation & Mentorship: Lead the development of incident playbooks and security procedures, and mentor junior personnel within the security team.


Qualifications
Skills & Experience Required
Communication: Strong written and verbal English communication skills, with a proven ability to break down intricate security risks for both technical and non-technical audiences.

Education & Experience: Degree in information technology, computer science, cybersecurity, or a related field, alongside 5+ years of experience in security analysis, incident response, or a related domain.

Certifications: AWS Security Certification or equivalent experience. Relevant industry certifications such as CISSP, CISM, GCIH, or OSCP are highly desirable.

Technical Core: In-depth knowledge of security principles, network protocols, operating systems, and common vulnerabilities.

Automation & Architecture: Proven experience applying Infrastructure as Code (IaC) principles, automation scripting, and containerization/orchestration platforms (Kubernetes, Helm, Docker).

Frameworks & Compliance: Knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory requirements (PCI DSS, GDPR).

AI Threat Landscape: Understanding of the threat landscape surrounding AI technologies, specifically evaluating and securing cloud and agent-based models.

Specific Technology Stack Experience
(Experience with equivalent or similar tools is completely acceptable)

Logging & SIEM: Splunk

Cloud & Endpoint: CrowdStrike (Host and CSPM), AWS Security, Cloud Firewalls (AWS/Fortinet)

Automation & IaC: Terraform, CloudFormation, Ansible, or similar frameworks; scripting in Python, Bash, etc.

Containers: Kubernetes, Helm, Docker

Pipeline Security: Sonarcloud, Snyk, GitHub, Quay, Artifactory

Network & Edge: Cloudflare/CloudFront (DDoS, WAF, CDN), ZScaler (ZTA)

Vuln Management: TenableIO

SaaS & Email: Proofpoint, Google Workspace, Atlassian, Slack

Device Management: Mac-based MDM systems (e.g., Kandji)

Summary
Why Work With Us?
Visionary Team, Proven Results: The leadership bench brings deep, collective experience in scaling high-growth FinTech companies through major funding cycles. This expertise creates a stable foundation, allowing you to focus on building, innovating, and expanding your professional network.

Accelerated Career Ownership & DEI: As an emerging high-growth company, career trajectories here are accelerated. Employees are immediately given a high level of ownership and autonomy over complex, impactful projects within an inclusive environment that actively works to eliminate bias.

Strategic Total Rewards & Wellbeing: Competitive compensation packages designed with a semi-annual bonus plan. Benefits include top-tier corporate hardware setups, modern office perks, a family leave top-up program, and a flexible Work-From-Anywhere policy.

Purpose-Driven Culture: Fostering strong, collaborative bonds built on Trust and Candor. The team enjoys premium office amenities, fully stocked kitchens, weekly catered team lunches, and daily premium local coffee perks.

Compensation Package
The hiring salary range for this position is $130,000 - $160,000 annually. The base pay offered is based on comparable market data from companies of similar employee size, revenue, and location. Permanent employees in this position may be eligible for a competitive semi-annual bonus program, subject to program eligibility requirements.

Additional Rewards Offerings Include:

Extended health and dental benefits

Paid time off

Savings and retirement plan matching

Parenthood top-up programs

Mentorship initiatives and leadership series

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.