IT Security Analyst, DevOps

LandSure Systems Ltd.; Vancouver; Hybrid; CAD 77,000 - 98,000; Full time

Job summary

Ein innovatives Unternehmen sucht einen IT Security Analyst, DevOps, um die Sicherheit und Integrität von Anwendungen und Systemen zu gewährleisten. Diese spannende Rolle umfasst die Implementierung von Sicherheitsmaßnahmen in DevOps-Pipelines, die Überwachung von Sicherheitsvorfällen und die Durchführung von Risikobewertungen. In einer dynamischen und unterstützenden Umgebung arbeiten Sie mit verschiedenen Abteilungen zusammen, um die Sicherheitslage des Unternehmens zu verbessern. Mit einem hybriden Arbeitsmodell und attraktiven Vorteilen wie 3 Wochen Urlaub zu Beginn und einem großzügigen Bonusprogramm bietet dieses Unternehmen eine hervorragende Gelegenheit für Fachleute, die in einem technologiegetriebenen Umfeld arbeiten möchten.

Benefits

3 Wochen Urlaub zu Beginn

Generöses Bonusprogramm

$650 Gesundheitsausgaben-Konto

Hybrides Arbeitsmodell

Qualifications

• 5+ Jahre Erfahrung in der Cybersicherheit, einschließlich 3 Jahre in DevOps-Sicherheit.
• Starke Kenntnisse in Sicherheitsprüfungen, einschließlich SAST und DAST.
• Erfahrung mit Cloud-Technologien wie AWS und Azure.

Responsibilities

• Implementierung von Sicherheitspraktiken in CI/CD-Pipelines.
• Überwachung und Analyse von Sicherheitsvorfällen in DevOps-Umgebungen.
• Durchführung regelmäßiger Schwachstellenscans und Risikobewertungen.

Skills

IT-Sicherheitsprinzipien

DevOps-Sicherheit

SAST

DAST

Penetrationstests

Vulnerability Management

Cloud Security

Interpersonelle Fähigkeiten

Education

Diplom oder Bachelor in Informatik

Zertifizierung in IT-Sicherheit

Tools

Veracode

Sysdig

Cloudflare

AWS Security Services

Azure Security Services

Job description

Join to apply for the IT Security Analyst, DevOps role at LandSure Systems Ltd.

2 weeks ago Be among the first 25 applicants

Join to apply for the IT Security Analyst, DevOps role at LandSure Systems Ltd.

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from LandSure Systems Ltd.

Talent Acquisition Specialist - LandSure Systems | Certified Technical Recruiter

Do you want to work for one of BC’s Top Employers for 2025 and join an innovative, technology-driven and growth-focused organization?

LandSure Systems Ltd. (LandSure) is looking to hire a IT Security Analyst, DevOps to join our Corporate IT division!

Who we are:

LandSure is a subsidiary of the Land Title and Survey Authority of BC (LTSA), a publicly accountable, statutory corporation that manages BC's land title and survey systems. Our team of nearly 100 employees supports the LTSA through information system consulting services, project management, customer support, and communications.

We offer meaningful work in the public interest. In support of the Province’s 30-point housing plan, LandSure has helped the LTSA build and launch the Condo and Strata Assignment Integrity Register as well as the Land Owner Transparency Registry, a first-of-its-kind registry.

We offer an innovative, performance-driven culture. We have helped the LTSA become a leader in automated property registration and through technology, we are reducing turnaround time for customers and improving the consistency, accuracy and efficiency of the LTSA’s services. We also build and manage innovative products such as ParcelMap BC and AUTOPROP, which support access to information for the land and real estate sectors.

We offer balance. LandSure provides employees with the ability to work for a stable, independent, values-driven technology company. The environment is entrepreneurial, innovative, and fast-paced yet supportive. Our culture is of mutual respect, constantly improving our professional and personal skills, and celebrating our accomplishments.

We believe in a hybrid of remote and in-office work and know you'll love our downtown Vancouver office as much as we do! Our employees can work either entirely in the office, or a hybrid of both remote and in-office. Therefore, applicants must currently live in British Columbia or have plans to relocate to British Columbia.

Visit landsure.ca/careers to learn more about why it's great to work at LandSure, including 3 weeks vacation to start, a generous bonus program, and a $650 health spending account.

What you'll do:

Reporting to the Manager, IT Security, Risk and Compliance, the IT Security Analyst, DevOps will focus on application and DevOps security and play a critical role in ensuring the security and integrity of in-house developed applications, infrastructure, data, and systems. This position involves monitoring, analyzing, and responding to security incidents, conducting vulnerability assessments of applications, and ensuring compliance with regulatory and organizational standards. The IT Security Analyst, DevOps will collaborate with various departments to implement security measures and enhance the organization's overall cybersecurity posture.

Key Responsibilities and Accountabilities:

Security Integration in DevOps Pipelines:

• Implement security best practices within continuous integration/continuous delivery (CI/CD) pipelines
• Automate security testing using Static Application Security Testing, Dynamic Application Security Testing, and Software Composition Analysis (SAST, DAST, SCA) in development workflows
• Ensure Infrastructure as Code (IaC) follows security guidelines

Security Monitoring and Incident Response:

• Investigate and respond to security incidents in DevOps and cloud environments
• Collaborate with security operations teams to detect, analyze, and mitigate threats
• Conduct post-incident analysis and recommend security improvements
• Utilize the organization’s security stack, including Veracode and Sysdig to proactively manage application security risks and threats

Risk Assessment and Management:

• Perform regular vulnerability scans and assessments to identify and remediate security risks
• Analyze risks and provide actionable recommendations to mitigate vulnerabilities
• Leverage tools such as Veracode, Edgescan for SAST and DAST vulnerability scans to ensure application security
• Work with various tools to perform Software Composition Analysis (SCA), registry & container security scans
• Assist in the development and maintenance of risk management frameworks

Compliance and Governance:

• Work with Manager, IT Security, Risk & Compliance to update Corporate Risk Register with identified application vulnerabilities and remediation actions
• Track and monitor the progress of security remediation initiatives. Ensure IT security practices align with regulatory requirements, the National Institute of Standards and Technology (NIST) and organizational policies
• Support audits and assessments related to IT security and compliance
• Maintain accurate and up-to-date documentation of IT security policies and procedures

Collaboration and Reporting:

• Collaborates with various divisions and teams to ensure secure configuration of systems and applications
• Assist in the evaluation and implementation of new security tools and technologies
• Prepare and deliver security reports and updates as required

Additional Responsibilities:

• Conduct security awareness training for employees using KnowBe4 as needed
• Perform infrastructure vulnerability assessments and generate reports for stakeholders
• Conduct user account and vendor security audits
• Support other IT security initiatives and duties as required

We encourage you to apply if you have:

Education and Experience:

• Diploma or bachelor's degree in computer science
• Strong understanding of IT security principles, practices, and tools
• Hands-on experience with security testing techniques such as SAST, DAST & application penetration testing
• Familiarity with tools such as Veracode (SAST & DAST) and Sysdig (SCA, Container Scanning), Imperva, Cloudflare, CloudWatch, Cloudtrail
• 5+ years of cybersecurity experience, including 3 years in DevOps Security and 2 years in IT Security preferred
• A certification in one or more of the following is desirable:
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• GIAC Cloud Security Automation Ec-Council Certification
• DevSecOps certification from AWS, Microsoft

Knowledge, Skills, and Abilities:

• Strong interpersonal, problem-solving, and conflict-resolution skills are important for success in this role
• Demonstrated ability to multitask while maintaining attention to detail
• Excellent oral and written communication skills with the ability to engage and collaborate with employees across multiple departments, presenting a friendly, approachable demeanor to leverage security to help others succeed
• Working experience in the following areas: application security, vulnerability management, threat modelling, penetration testing, web and network protocols, and encryption technologies
• Practical and operational experience with cyber security services and tools such as Veracode, Sysdig, Cloudflare, Imperva, AWS Security Services, Azure Security Services, etc.
• Knowledge and understanding of various information security frameworks such as OWASP, SANS, NIST, CSF etc.
• Working knowledge and hardening skills on information technologies including Linux, Windows, MySQL, MSSQL, IBM DB2, etc.
• Working knowledge and hardening skills on Cloud technologies including Amazon Web Services (AWS) and Azure

We are dedicated to transparency in our hiring process. $77,700 to $97,100 annually, reflects a reasonable expectation for pay for the position depending on qualifications and experience. This compensation is specific to the role within our organization and takes into account a wide range of factors that are considered in making compensation decisions including but not limited to job-related skills, experience and relevant training or education, business and organizational needs.

We are committed to fostering a safe, respectful, and inclusive workplace where all employees can share their diverse views, skills and backgrounds. Valuing employee diversity strengthens workplace trust and enhances our ability to innovate in service of our customers and partners. Our hiring practices reflect this and we are committed to ensuring that our workforce reflects where we live and work. Consider joining our team and being part of an innovative, inclusive and rewarding workplace.

Please note applicants must be legally authorized to work in Canada.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Analyst, Information Technology, and General Business

• Industries

  IT Services and IT Consulting, Real Estate, and Software Development

Referrals increase your chances of interviewing at LandSure Systems Ltd. by 2x

Get notified about new Information Technology Security Analyst jobs in Vancouver, British Columbia, Canada.

Burnaby, British Columbia, Canada 1 day ago

Burnaby, British Columbia, Canada 3 months ago

Security Specialist, Managed Risk (IT Audit)

Burnaby, British Columbia, Canada 2 weeks ago

Langley, British Columbia, Canada 2 weeks ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.