Senior AI-Driven AppSec Engineer

IFS; Vancouver; Hybrid; CAD 117,000 - 167,000; Full time

Benefits offered by this job

Hybrid work opportunities

Job summary

IFS is seeking an Application Security Engineer to join the Agentic Platform within the Cloud Platform team in a hybrid Canada-based role. You will embed security across CI/CD pipelines, build AI-driven security agents, and enforce SSDLC practices while staying ahead of threats using proactive, hands-on security engineering.

You will partner with engineering to harden AKS workloads, IAM, and secrets management, automate evidence collection for compliance, and drive security improvements across

Qualifications

• Proactive security mindset and hands-on engineering approach.
• Experience integrating security into CI/CD pipelines (SSDLC).
• Knowledge of agentic/AI security concepts and frameworks (OWASP, MITRE ATLAS).
• Experience with cloud-native security on AKS and IAM systems.

Responsibilities

• Embed application security into the Cloud Platform and CI/CD pipelines.
• Design and operate AI-driven security agents to scan, triage, and remediate vulnerabilities.
• Establish SSDLC practices and integrate automated enforcement as native gates.
• Lead security of agentic systems and defend against prompt injection and data exfiltration.
• Remediate high-severity CVEs and automate repeatable security toil.
• Harden AKS workloads, IAM, and secrets management with best practices.
• Contribute to compliance evidence collection and continuous control monitoring.
• Define runbooks, detection logic, and incident response procedures.

Skills

Proactive security mindset

DevSecOps experience

AI security

Security automation

Tools

Azure DevOps

AKS

Keycloak

Azure AD

Terraform

Bicep

Kyverno

SAST/SCA/DAST

Semgrep

Job description

IFS is seeking an Application Security Engineer to join the Agentic Platform within the Cloud Platform team in a hybrid Canada-based role. You will embed security across CI/CD pipelines, build AI-driven security agents, and enforce SSDLC practices while staying ahead of threats using proactive, hands-on security engineering.

You will partner with engineering to harden AKS workloads, IAM, and secrets management, automate evidence collection for compliance, and drive security improvements across