IT Advisor - Cloud and Application Security Advisor

BC Hydro

Vancouver

Hybrid

CAD 90,000 - 120,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Minimum of 15 paid vacation days

Training and development courses

Flexible work model

Job summary

A major utility company in Metro Vancouver seeks an IT Advisor - Cloud and Application Security Advisor to establish security practices in application development. The ideal candidate has at least 7 years in application security, experience with cloud migration, and is proficient in frameworks like OWASP. This full-time position offers a hybrid work model along with substantial benefits including paid vacation days.

Qualifications

Minimum of 7 years of dedicated experience in application and cloud security.
Experience replacing legacy applications with cloud-based applications.
Strong grasp of cloud platforms.

Responsibilities

Establish security practices across application development.
Formulate security policies for cloud infrastructure.
Identify application security requirements.

Skills

Application security frameworks

Cloud security

Communication skills

Problem-solving skills

Experience with AWS, Azure, or Google Cloud

Education

University or College degree in Computer Science or Information Technology

Tools

Docker

Kubernetes

CI/CD integration tools

Job description

IT Advisor - Cloud and Application Security Advisor

Hours of work: Full-time (37.5 hrs/week)

No. of positions: 1

Closing date: August 28, 2025

About the job:

Region: Lower Mainland

Flexible Work Role: Hybrid

What you’ll do

Work with stakeholders to establish a set of security practices that cover all aspects of application development, from design to deployment, to create a robust application security program.

Formulate and advocate for security policies and standards related to applications, databases, and cloud infrastructure.

Work with stakeholders to establish automated security verification and testing practices for applications.

Identify application security requirements by using threat modeling and understanding the compliance and regulatory landscape.

Work with stakeholders to apply application security principles across cloud-native application development to support secure cloud deployments.

Support architecture in the establishment of application and cloud security posture management and workload protection solutions.

Support application security champion initiatives to reinforce security principles to improve security culture.

What you bring

University or College degree in Computer Science, Information Technology or related field, or a combination of education and experience may be considered.

A minimum of 7 years of dedicated experience in application and cloud security.

Experience replacing legacy, on-premises applications with cloud-based applications, with a focus on secure migration pathways, on-demand computing, and scalability.

A background in software development with a strong grasp of cloud platforms like AWS, Azure, or Google Cloud.

An analytical mindset with meticulous problem-solving skills.

Outstanding communication abilities, both in writing and speaking.

Preferred certifications include GIAC Cloud Security Automation (GCSA), GIAC Cloud Security Essentials Certification (GCLD), GIAC Public Cloud Security (GPCS), Microsoft Certified: DevOps Engineer Expert (AZ-400), Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Certified: Security Operations Analyst Associate (SC-200).

What else you should know

A minimum of 15 paid vacation days

Flexible work model, depending on your role type

Training and development courses

For more information on the benefits we offer, visit bchydro.com/benefits.

Technical Skills and Knowledge

Proficiency in application security frameworks such as OWASP.

Expertise in security testing tools and secure coding practices.

Familiarity with security standards like ISO 27001, NIST, and CIS.

Experience with automation, CI/CD integration, and security testing workload reduction.

Understanding of CASB, web protection platforms, and technologies.

Proficiency in Threat Modeling, with experience in scripting languages - for security automation.

Knowledge of Docker, Kubernetes, and Infrastructure as Code (IaC) principles for secure cloud configurations.

Before you apply, please confirm you meet BC Hydro's time in role requirement. M&P employees must meet the time in role requirement specified in their most recent offer letter. For MoveUP and IBEW employees, the current time in role as outlined in the Collective Agreements will apply.

Don't forget to update your Candidate Profile with your current resume and copies of your certifications. If applicable, include your Trades Qualification. This will ensure we have all the necessary information to assess your application without any delays.

How to apply

Interested candidates should submit their applications online at https://app.bchydro.com/careers/current_opp.html or click 'Apply'

On the BC Hydro Careers site, click on the Apply button in order to complete the steps to apply for this job. Please be sure to update your Candidate Profile with your current resume and include copies of your certifications, if applicable.

Seniority level