Senior Attack Path Architect | BloodHound & IAM Trails

RBC; Vancouver; Hybrid; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Total rewards program

Annual training budget

Hybrid-remote work environment

Stock where applicable

Career development opportunities

Job summary

RBC is seeking a skilled security engineer to operate and tune BloodHound Enterprise, mapping attack paths across on-prem and cloud platforms. You will analyze data to prioritize remediation by real-world impact and validate data fidelity, while expanding coverage into CI/CD pipelines and secrets management.

You will design custom collectors, support Red Team exercises, and collaborate with Cloud Engineering, IAM, SOC, and other teams to communicate exposure and progress to stakeholders.

Qualifications

• 3+ years of on-premises and cloud security/engineering experience with Active Directory and Entra/Azure, AWS, or GCP in enterprise environments.
• Understanding of DevOps/CI-CD tooling (Jenkins, GitHub Actions, Terraform, CloudFormation, Ansible, or similar).
• Proficiency in BloodHound Ciphers and PowerShell, C#, or Python, with the ability to build or adapt tools and automation.
• Familiarity with containerized environments (e.g., Kubernetes) and associated RBAC/security implications.
• Solid understanding of network protocols, identity and access management, and common misconfigurations across AD, cloud, and DevOps environments.
• Experience working in or supporting Red, Blue, and/or Purple Team operations in enterprise settings.
• Working knowledge of Linux and Windows operating systems.

Responsibilities

• Operate and tune BloodHound Enterprise to map attack paths across on-prem and cloud platforms.
• Analyze attack path data to prioritize remediation by exploitability and business impact.
• Validate data collection reflects true environment state.
• Extend attack path coverage into CI/CD pipelines and secrets management with OpenHound.
• Design custom collectors to enrich attack path data beyond out-of-the-box coverage.
• Support Red Team and collaborate with Cloud Engineering, IAM, SOC, and stakeholders.
• Communicate attack path exposure, remediation progress, and identity risk trends to stakeholders.

Skills

AD & Entra/Azure

Cloud platforms (AWS/GCP/Azure)

CI/CD tooling

BloodHound

PowerShell

C#

Python

Kubernetes

RBAC

Linux/Windows

Tools

Jenkins

GitHub Actions

Terraform

CloudFormation

Ansible

OpenHound

Job description

RBC is seeking a skilled security engineer to operate and tune BloodHound Enterprise, mapping attack paths across on-prem and cloud platforms. You will analyze data to prioritize remediation by real-world impact and validate data fidelity, while expanding coverage into CI/CD pipelines and secrets management.

You will design custom collectors, support Red Team exercises, and collaborate with Cloud Engineering, IAM, SOC, and other teams to communicate exposure and progress to stakeholders.