Cyber Security Engineer

Altis; Vancouver; Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Altis, a rapidly growing fintech organization in Vancouver, is seeking a cybersecurity engineer to help shape and mature a modern security program. You will collaborate with Infrastructure, Engineering, and IT teams across vulnerability management, cloud security, identity controls, and security governance to embed security into technology and processes.

You will lead remediation efforts, implement MFA/Conditional Access and AI governance, and contribute to audit readiness while working in a

Qualifications

• 3+ years of progressive cybersecurity engineering or information security experience.
• Hands-on experience with vulnerability management platforms such as Rapid7, Qualys, Tenable, or similar solutions.
• Strong knowledge of cloud security, particularly Azure and/or GCP environments.
• Experience securing identities using MFA, Conditional Access, Okta, and related technologies.
• Knowledge of endpoint security, exposure management, security monitoring, and compliance frameworks such as SOC 2 or ISO 27001.
• Strong documentation, communication, and stakeholder management skills, with the ability to collaborate across technical and business teams.
• Experience within growing organizations where adaptability and wearing multiple hats are valued. Experience with AI security, cloud posture management, or the broader Rapid7 platform is considered an asset.

Responsibilities

• Lead vulnerability and exposure management activities using Rapid7 and related security tools, driving remediation across cloud and endpoint environments.
• Strengthen identity security by administering MFA, Conditional Access, Okta, and email security controls.
• Support cloud security initiatives across Azure and GCP while helping improve overall security posture.
• Develop and maintain cybersecurity policies, including emerging AI governance and security standards.
• Contribute to SOC 2, PIPEDA, and audit readiness through evidence collection, access reviews, and control validation.
• Partner with Infrastructure, Engineering, IT, and managed detection and response providers to investigate security events and continuously improve monitoring capabilities.

Skills

Cybersecurity engineering

Vulnerability management

Cloud security

Identity security

SOC 2 / ISO 27001

Documentation & stakeholder mgmt

AI security awareness

Adaptive in growing orgs

Tools

Rapid7

Qualys

Tenable

Okta

Azure

GCP

Job description

About the Opportunity

Join one of Canada's fastest-growing fintech organizations and help shape the future of cybersecurity within a business that is making a meaningful impact for small businesses across the country. As the organization continues to grow, cybersecurity has become a strategic priority, creating an exciting opportunity to strengthen and evolve a modern security program.

In this role, you'll collaborate closely with Infrastructure, Engineering, and IT teams while working across vulnerability management, cloud security, identity, compliance, AI governance, and security engineering. Your contributions will help embed security into technology and business processes, making a visible impact across the organization.

What's In It for You

This is an opportunity to help build and influence security, not simply maintain it. You'll gain exposure to a broad range of technologies and initiatives while working in a collaborative environment where security is viewed as a business enabler.

You'll also benefit from a culture that values innovation, ownership, and continuous improvement, with excellent opportunities for professional growth as the security function continues to expand.

Your Responsibilities

• You’ll lead vulnerability and exposure management activities using Rapid7 and related security tools, driving remediation across cloud and endpoint environments.
• You’ll strengthen identity security by administering MFA, Conditional Access, Okta, and email security controls.
• You’ll support cloud security initiatives across Azure and GCP while helping improve overall security posture.
• You’ll develop and maintain cybersecurity policies, including emerging AI governance and security standards.
• You’ll contribute to SOC 2, PIPEDA, and audit readiness through evidence collection, access reviews, and control validation.
• You’ll partner with Infrastructure, Engineering, IT, and managed detection and response providers to investigate security events and continuously improve monitoring capabilities.

Skills and Qualifications

• 3+ years of progressive cybersecurity engineering or information security experience.
• Hands‑on experience with vulnerability management platforms such as Rapid7, Qualys, Tenable, or similar solutions.
• Strong knowledge of cloud security, particularly Azure and/or GCP environments.
• Experience securing identities using MFA, Conditional Access, Okta, and related technologies.
• Knowledge of endpoint security, exposure management, security monitoring, and compliance frameworks such as SOC 2 or ISO 27001.
• Strong documentation, communication, and stakeholder management skills, with the ability to collaborate across technical and business teams.
• Experience within growing organizations where adaptability and wearing multiple hats are valued. Experience with AI security, cloud posture management, or the broader Rapid7 platform is considered an asset.

Note from the Hiring Manager

"We're looking for someone who's curious, collaborative, and excited to help build a security program that enables the business to grow. If you enjoy solving complex challenges, improving processes, and making a visible impact, we'd love to meet you."

Location: Vancouver, BC (Hybrid, primarily remote with occasional in-office collaboration)

Language: English, strong written and verbal communication required

Background Check Requirement: Criminal background and professional reference checks required