Senior Security Engineer

British Columbia Investment Corporation; Victoria; On-site; CAD 135,000 - 160,000; Full time

Job summary

British Columbia Investment Corporation is seeking a Senior Security Engineer to join our Security Engineering and Operations team in a hybrid environment. You will secure complex cloud and on‑prem environments, define security requirements, and guide secure solution design across the organization.

The role requires at least 5 years of security engineering experience, Azure expertise, and professional certifications (GIAC, CISSP, OSCP, CISM or equivalent).

Qualifications

• Bachelor’s degree in technology, engineering, computer science, or related field.
• Minimum 5 years of progressively senior technical experience in information security processes, products and projects.
• Strong knowledge of securing cloud environments (Microsoft Azure).
• Professional certifications such as GIAC, CISSP, OSCP, CISM or equivalent are essential.

Responsibilities

• Develop and maintain security processes, technologies, and projects of varying complexity.
• Collaborate with business and technology teams in an Agile hybrid environment to deliver secure, high‑quality products.
• Define security requirements for new products, tools, and services, and guide solution design.
• Architect, analyze, and recommend security controls and procedures, ensuring compliance with security standards and policies.
• Provide technical leadership, mentoring, and coaching to team members.

Skills

Leadership

Communication

Problem-solving

Agile/Scrum

Team coaching

Education

Bachelor’s degree in technology/engineering/CS

Tools

Azure

EDR

Firewall/IPS

CNAPP

IAM (hybrid)

Job description

About the Role

BCI, a leading Canadian asset manager with $313.7billion in gross assets under management, is seeking an experienced Senior Security Engineer to join our Security Engineering and Operations team. The role reports to the Senior Manager, Cyber Security Engineering & Operations, and focuses on securing complex cloud and on‑premises environments, developing security requirements, and implementing secure solutions across the organization.

Responsibilities

• Develop and maintain security processes, technologies, and projects of varying complexity.
• Collaborate with business and technology teams in an Agile hybrid environment to deliver secure, high‑quality products.
• Define security requirements for new products, tools, and services, and guide solution design.
• Architect, analyze, and recommend security controls and procedures, ensuring compliance with security standards and policies.
• Provide technical leadership, mentoring, and coaching to team members.
• Communicate complex security issues to non‑technical stakeholders in clear, customer‑centric language.
• Validate and tune security testing tools, perform security monitoring, and participate in incident response scenarios.
• Document designs, produce technical reports, and undertake special projects as required.

Qualifications

• Bachelor’s degree in technology, engineering, computer science, or a related field.
• Minimum 5 years of progressively senior technical experience focused on information security processes, products, and projects.
• Strong knowledge of engineering secure systems and securing cloud environments (Microsoft Azure).
  
• Excellent documentation, customer‑service, listening, communication, and problem‑solving skills.
• Experience with Agile methods (Scrum) and DevOps practices.
• Professional certifications such as GIAC, CISSP, OSCP, CISM, or equivalent are essential.

Technical Skills and Requirements

• Identity and access management systems for hybrid environments
• Secure coding practices
• Systems engineering
• Ethical vulnerability research and threat modeling
• Windows, UNIX, and Linux operating systems security
• Virtualization, container, and serverless security
• Privileged access management systems for hybrid environments
• EDR and/or other endpoint protection technologies
• Firewall, intrusion protection and intrusion detection systems
• Zero Trust system design
• Cloud Native Application Protection Platform (CNAPP) systems
• Secure application design principles
• Data classification and DLP solutions
• Enterprise vulnerability management and remediation
• Incident response
• Networking technologies (subnetting, NAC, DNS, encryption, VPNs, VLANs, VoIP)
• Phishing and social engineering defense

Day to Day Activities

• Develop innovative solutions to production security issues and evaluate emerging technologies.
• Guide projects during the solution design phase and coordinate with application, operations, and product teams.
• Provide guidance on secure product designs that meet security requirements.
• Monitor compliance and enforce security controls in business processes.
• Lead security testing, tuning, and monitoring initiatives to improve BCI’s security posture.
• Support incident response and security monitoring activities.
• Document designs and produce technical reports to support security initiatives.

Location & Work Arrangements

Strong preference for Victoria, BC; Vancouver, BC considered for the right candidate. Occasional travel to Victoria anticipated. The role offers a flexible arrangement of one remote day per week.

Compensation

Base salary ranges from CAD$135,000to$160,000 for senior level, or CAD$125,000to$150,000 for those with fewer than the required years of experience. BCI provides a total rewards package including performance‑based incentive, comprehensive health and dental benefits, a defined benefit pension plan, and paid time off.

EEO Statement

We welcome all qualified candidates who are legally authorized to work in the country where this job is located.