Senior Security Engineer

MatchBox Consulting Group; Vancouver; On-site; CAD 120,000 - 180,000; Full time

Job summary

MatchBox Consulting Group seeks a Senior Security Engineer in Vancouver to lead security operations, improve detection, and automate incident response using AI and IaC. You will manage cloud defenses, CI/CD security, and vulnerability programs while mentoring junior staff.

You bring 5+ years in security analysis or incident response, strong knowledge of NIST/ISO controls, and hands-on experience with Splunk, CrowdStrike, Terraform, Kubernetes, and CI/CD tooling.

Qualifications

• 5+ years in security analysis or incident response.
• Knowledge of security frameworks (NIST, ISO 27001) and cloud security.
• Experience with IaC, scripting, automation, and AI-assisted workflows.
• Strong network, OS, and vulnerability management fundamentals.
• Hands-on with SIEM, threat intel, and security tooling integration.

Responsibilities

• Lead day-to-day security operations and AI-assisted incident response.
• Tune SIEM, reduce false positives, and manage cloud security controls.
• Develop threat detection use cases and attack playbooks.
• Administer cloud environments, cloud firewalls, and ZTA deployment.
• Oversee vulnerability/configuration management and secure CI/CD.
• Mentor junior security staff and collaborate with stakeholders.

Skills

Security analysis

Incident response

English communication

Education

Degree in information technology

Tools

Splunk

CrowdStrike

Terraform

Kubernetes

Docker

Snyk

GitHub CI/CD

Artifactory

CloudFront

Zscaler (ZTA)

TenableIO

Job description

MatchBox Consulting Group is currently seeking a Senior Security Engineer for a permanent role at a client of ours located in Vancouver.

Responsibilities

• Embed Automation & AI Enhancement in Daily Workflows: Continually leverage generative AI, scripting, and Infrastructure as Code (IaC) across all tasks—from incident triage to playbook creation to reduce manual toil, accelerate decision-making, and scale security operations.
• Lead and oversee day‑to‑day security operations, utilizing AI‑assisted analysis to ensure rapid and proper coordination of response with all parties of interest.
• Ensure all incident tickets are assigned accordingly and resolved while establishing and complying with operations SLAs.
• Improve alert signal‑to‑noise ratios and integrate external threat intel with security monitoring tools.
• Regularly update and continuously improve threat detection use cases, utilizing AI tools to assist in rapid rule generation and threat modeling.
• Ensure the efficient and effective function of all security tools across the organization.
• Continuously fine‑tune our SIEM to reduce false positives, leveraging advanced ML/AI capabilities where available to ensure pertinent data sources are onboarded and adequately parsed.
• Identify, assess, and mitigate emerging AI risks, with a specific focus on vulnerabilities related to cloud‑based AI services and agent‑based AI architectures.
• Manage and secure cloud environments, utilizing cloud firewalls and endpoint/CSPM platforms.
• Deploy and maintain Zero Trust Architecture (ZTA).
• Administer edge protections, including DDoS mitigation, WAF, and CDN configurations.
• Oversee enterprise‑wide vulnerability and configuration management.
• Secure user SaaS‑based tools, including platforms like Google Workspace, Atlassian, and Slack.
• Manage Mac‑based laptop and mobile device management (MDM) platforms.
• Maintain comprehensive DNS and mail security/monitoring.
• Integrate and manage security within the CI/CD pipeline, including DAST, SAST, and SCA.
• Secure the software development lifecycle by integrating and managing scanning and repository tools.
• Manage and secure containerized environments, ensuring safe image builds, dependency management, and secure deployments.
• Manage the development of security documents, such as incident playbooks and security operations procedures.
• Develop and exercise playbooks for different types of attacks, keeping all security operations documents up to date.
• Lead and mentor junior personnel within the security team.

Requirements

• Strong written and verbal English communication skills, with a proven ability to break down intricate security risks and procedures for both technical and non‑technical audiences
• Degree in information technology, computer science, cybersecurity, or a related field.
• 5+ years of experience in security analysis, incident response, or a related field.
• AWS Security Certification or equivalent experience.
• Relevant industry certifications, such as CISSP, CISM, GIAC Certified Incident Handler (GCIH), or Offensive Security Certified Professional (OSCP).
• In‑depth knowledge of security principles, concepts, and best practices.
• Strong understanding of network protocols, operating systems, and common vulnerabilities.
• Proven experience applying Infrastructure as Code (IaC) principles and utilizing scripting/automation, along with modern AI assistants, to streamline daily security workflows and incident response.
• Firm understanding of containerization and orchestration platforms (Kubernetes, Helm, Docker) along with robust image and dependency management practices.
• Knowledge of security frameworks and standards, such as NIST, ISO 27001, and CIS Controls.
• Familiarity with regulatory requirements, such as PCI DSS and GDPR.
• Understanding of the threat landscape surrounding AI technologies, specifically evaluating and securing cloud and agent‑based models.
• Strong analytical and problem‑solving skills, paired with excellent communication and collaboration abilities.
• Specific Technology Stack Experience (Note: Experience with equivalent or similar tools is completely acceptable):
• Logging & SIEM: Splunk.
• Cloud & Endpoint: CrowdStrike (Host and CSPM), AWS Security, Cloud Firewalls (AWS/Fortinet).
• Automation & IaC: Terraform, CloudFormation, Ansible, or similar automation frameworks and scripting languages (e.g., Python, Bash).
• Containers & Orchestration: Kubernetes, Helm, Docker, and dependency/image management tools.
• Pipeline Security: CI/CD pipeline security (DAST/SAST/SCA), such as Sonarcloud, Snyk, GitHub, Quay, and Artifactory.
• Network & Edge: Cloudflare/CloudFront (DDoS, WAF, CDN), ZScaler (ZTA).
• Vuln Management: TenableIO (Vulnerability and Configuration Management).
• SaaS & Email: Proofpoint (DNS/Mail), Google Workspace, Atlassian, Slack.
• Device Management: Mac‑based MDM systems like IRU or Kandji.

For more current job opportunities, Follow MatchBox at linkedin.com/company/matchbox-recruitment/

_________________________

About MatchBox

Headquartered in downtown Vancouver and serving clients nationally, MatchBox is one of the leading recruitment and solutions firms that specializes in the fields of IT & Technology, Engineering & Technical, Real Estate & Construction, and Accounting & Finance. We offer unrivaled expertise with our team's extensive experience in the recruitment and professional services industry. We are dedicated to building great connections and creating strong opportunities within the workforce and the labor market.

Equal Opportunities

MatchBox is committed to providing equal opportunities for all applicants. We welcome and encourage applications from people of all backgrounds, including members of minority groups such as racialized individuals, people with disabilities, LGBTQ+ individuals, and Indigenous peoples. It is a priority for us that all candidates are treated fairly and without discrimination. Our recruitment teams receive ongoing training on using objective criteria for evaluating candidates and other related topics to create an inclusive and welcoming environment for all.

Work Permits

Please note that we require all interested candidates to obtain the necessary work permits from the Government of Canada prior to submitting an application. This position is open exclusively to individuals residing in Canada and legally authorized to work in Canada. Applications not meeting these criteria will not be considered.

Further Consideration

We receive a high volume of applications and are only able to contact candidates who are selected for further consideration.

Find out more at www.matchboxhr.com