Senior Security Engineer

Metrics Recruitment; Vancouver; On-site; CAD 90,000 - 130,000; Full time

Job summary

Metrics Recruitment is seeking a Senior Security Engineer to take a hands-on role across security operations, offensive security, and cloud security. You’ll combine attacker mindset with defensive expertise to identify vulnerabilities, strengthen infrastructure, and improve detection and incident response.

You’ll lead security monitoring, threat detection, SIEM tuning, and incident response, and mentor a growing security team.

Qualifications

• 5+ years of experience in security engineering, penetration testing, or incident response.
• OSCP or equivalent offensive security certification.
• Strong knowledge of OWASP, MITRE ATT&CK, threat modeling, and attacker TTPs.
• Experience with AWS security, SIEM, scripting/automation, and tools such as Burp Suite, Metasploit, Nmap.
• Experience securing AI/cloud-based services is a plus.

Responsibilities

• Lead security monitoring, threat detection, and incident response, including SIEM tuning and threat intelligence.
• Conduct hands-on penetration testing and vulnerability assessments across applications, networks, and cloud environments.
• Manually identify and validate vulnerabilities such as SQLi and XSS, and investigate sophisticated attack patterns in raw SIEM/log data.
• Strengthen cloud environments, CI/CD pipelines, containers, and Zero Trust controls.
• Build and improve security playbooks, threat models, and automated security workflows using scripting, IaC, and AI tooling.

Skills

Hands-on security

Threat detection

Mentoring

Education

OSCP or equivalent offensive security certification

Tools

Burp Suite

Metasploit

Nmap

Job description

We’re looking for a Senior Security Engineer to take a hands-on role across security operations, offensive security, and cloud security. You’ll combine an attacker mindset with defensive expertise to identify vulnerabilities, strengthen infrastructure, and improve detection and incident response.

What this role owns

• Lead security monitoring, threat detection, and incident response, including SIEM tuning and threat intelligence.
• Conduct hands‑on penetration testing and vulnerability assessments across applications, networks, and cloud environments.
• Manually identify and validate vulnerabilities such as SQLi and XSS, and investigate sophisticated attack patterns in raw SIEM/log data.
• Strengthen cloud environments, CI/CD pipelines, containers, and Zero Trust controls.
• Build and improve security playbooks, threat models, and automated security workflows using scripting, IaC, and AI tooling.

You’ll be a fit if you are

• Hands‑on and security‑mindful, with experience across both offensive and defensive security.
• Comfortable performing manual penetration testing rather than relying solely on automated scanners.
• Strong in SIEM/log analysis and able to identify threats beyond pre‑built alerts.
• Experienced with cloud security, vulnerability management, and modern security tooling.
• Comfortable working autonomously and mentoring others in a growing security team.

Preferred background

• 5+ years of experience in security engineering, penetration testing, incident response, or a related field.
• OSCP or equivalent offensive security experience.
• Strong knowledge of OWASP, MITRE ATT&CK, threat modeling, and common attacker TTPs.
• Experience with AWS security, SIEM platforms, scripting/automation, and tools such as Burp Suite, Metasploit, Nmap, or equivalent.
• Experience securing AI/cloud‑based services is a plus.