MatchBox Consulting is currently seeking a Senior IT Security Engineer for a 6‑month contract role with our Vancouver/Victoria based client. Work may be done remotely within BC but preference will be given to local candidates who can work at either the Victoria or Vancouver office 3‑4 working days per week. Expected working hours will be 7 hours a day from 8:30 AM to 4:30 PM, PDT, five (5) days per week.Senior IT Security Engineer
Department Overview
The Technology team serves as a strategic partner to business units across the organization. It enables critical business processes and operational activities through the delivery of secure, scalable, and innovative technology solutions. Responsibilities include developing digital capabilities, modernizing services and products, supporting collaboration and productivity platforms, and maintaining infrastructure, systems, business applications, and advanced technologies that support front‑, middle‑, and back‑office operations.Position Summary
Reporting to the Manager, DevSecOps, the Senior IT Security Engineer is responsible for security processes, technologies, and initiatives of medium to high complexity. This role plays a key part in defining security requirements and designing, implementing, and maintaining security solutions across enterprise environments. The successful candidate will collaborate with cross‑functional teams in an Agile and hybrid work workplace to support the delivery of secure, high‑quality technology solutions. This position requires strong technical expertise in application security, cloud security, secure software development practices, and vulnerability management.Qualifications
Bachelor's degree in Information Technology, Engineering, Computer Science, or a related discipline.Minimum of 8–10 years of progressively senior experience in technical roles focused on information security, security engineering, and related projects.Strong expertise in secure software engineering principles and practices.Experience securing cloud environments, particularly Microsoft Azure.Excellent customer service, communication, listening, and problem‑solving skills.Demonstrated ability to design and implement programs that measure, improve,



and sustain security posture across complex enterprise environments.Ability to communicate complex security concepts and develop security requirements and user stories for both technical and non‑technical stakeholders.Experience working within Agile methodologies (Scrum) and DevSecOps practices is considered an asset.Technical Skills Requirements
Required
Strong hands‑on experience with selection, implementation, and operationalization of application security testing tools, including SAST, DAST, IAST, and SCA within enterprise CI/CD pipelines.Secure API design and security controls, including OAuth 2.0, OpenID Connect, and API gateway security.Secure coding practices, threat modeling, and ethical hacking techniques.AI/ML application security, including prompt injection prevention, model security, and emerging AI‑related threats.Vulnerability assessment, remediation, and reporting processes.Preferred Additional Skills
Proficiency in one or more programming languages such as Python, JavaScript/TypeScript, Java, C#, or Go.Authentication, authorization, and encryption technologies.Identity and privileged access management for on‑premises, cloud, and hybrid environments.Application security and encryption solutions.Web application proxy technologies, including SSL/TLS decryption.Penetration testing and vulnerability assessment methodologies.Platform and infrastructure security.Industry certifications such as GWAPT, GWEB, CSSLP, CEH, OSWE, or equivalent experience.Key Responsibilities
Application Security
Lead the evaluation, selection, implementation, and optimization of SAST, DAST, IAST, and SCA tools, including integration into CI/CD pipelines.Develop remediation guidance, standards, procedures, and runbooks for security findings.Partner with DevSecOps and development teams to establish and maintain secure coding standards, security guidelines, and training materials.Conduct application security assessments, architecture reviews, and threat modeling exercises for new and existing solutions.Serve as a security subject‑matter expert within Agile development teams and promote a security‑first culture.Produce technical documentation, security designs, and reports supporting security initiatives.Assess, triage,



and prioritize application security vulnerabilities and work closely with development teams to facilitate remediation.Develop and maintain automated security testing capabilities to support continuous assurance and monitoring.Conduct security risk reviews of software, SaaS solutions, third‑party technologies, and internally developed code.Monitor emerging threats, vulnerabilities, and attack techniques related to application security, AI/ML technologies, and cloud environments, recommending mitigation strategies where appropriate.Define technical security requirements and provide guidance throughout solution design and implementation phases.Collaborate with application, operations, infrastructure, and product teams to ensure secure‑by‑design solutions.Mentor and support team members in application security practices, tools, and methodologies.Identify security risks, issues, and barriers proactively, and recommend practical solutions.Tune and validate security testing tools to ensure accurate, actionable, and meaningful results.Support security monitoring activities and participate in incident response as a subject‑matter expert.Perform other related duties as required.Core Competencies
Security‑first mindsetDeveloper enablement and advocacyContinuous learning and adaptabilityCross‑functional collaborationAnalytical problem‑solving and troubleshootingTechnical documentation and knowledge sharingMentoring, coaching, and knowledge transferEqual Opportunities
MatchBox is committed to providing equal opportunities for all applicants. We welcome and encourage applications from people of all backgrounds, including members of minority groups such as racialized individuals, people with disabilities, LGBTQ+ individuals, and Indigenous peoples. It is a priority for us that all candidates are treated fairly and without discrimination. Our recruitment teams receive ongoing training on using objective criteria for evaluating candidates and other related topics to create an inclusive and welcoming environment for all.Work Permits
Please note that we require all interested candidates to obtain the necessary work permits from the Government of Canada prior to submitting an application. This position is open exclusively to individuals residing in Canada and legally authorized to work in Canada. Applications not meeting these criteria will not be considered.
#J-18808-Ljbffr

📌 Senior It Security Engineer (Winnipeg)
🏢 MatchBox Consulting Group
📍 Winnipeg