Match

Box Consulting Group is currently seeking a Senior Security Engineer for a permanent role at a client of ours located in Vancouver Responsibilities: Embed Automation & AI Enhancement in Daily Workflows: Continually leverage generative AI, scripting, and Infrastructure as Code (IaC) across all tasksfrom incident triage to playbook creationto reduce manual toil, accelerate decision-making, and scale security operations.

Lead and oversee day-to-day security operations, utilizing AI-assisted analysis to ensure rapid and proper coordination of response with all parties of interest.

Ensure all incident tickets are assigned accordingly and resolved while establishing and complying with operations SLAs.

Improve alert signal-to-noise ratios and integrate external threat intel with security monitoring tools.

Regularly update and continuously improve threat detection use cases, utilizing AI tools to assist in rapid rule generation and threat modeling.

Ensure the efficient and effective function of all security tools across the organization.

Continuously fine-tune our SIEM to reduce false positives, leveraging advanced ML/AI capabilities where available to ensure pertinent data sources are onboarded and adequately parsed.

Identify, assess, and mitigate emerging AI risks, with a specific focus on vulnerabilities related to cloud-based AI services and agent-based AI architectures.

Manage and secure cloud environments, utilizing cloud firewalls and endpoint/CSPM platforms.

Deploy and maintain Zero Trust Architecture (ZTA).

Administer edge protections, including DDoS mitigation, WAF, and CDN configurations.

Oversee enterprise-wide vulnerability and configuration management.

Secure user SaaS-based tools, including platforms like Google Workspace, Atlassian, and Slack.

Manage Mac-based laptop and mobile device management (MDM) platforms.

Maintain comprehensive DNS and mail security/monitoring.

Integrate and manage security within the CI/CD pipeline, including DAST, SAST, and SCA.

Secure the software development lifecycle by integrating and managing scanning and repository tools.

Manage and secure containerized environments, ensuring safe image builds, dependency management, and secure deployments.

Manage the development of security documents, such as incident playbooks and security operations procedures.





Develop and exercise playbooks for different types of attacks, keeping all security operations documents up to date.

Lead and mentor junior personnel within the security team.

Requirements: Strong written and verbal English communication skills, with a proven ability to break down intricate security risks and procedures for both technical and non-technical audiences Degree in information technology, computer science, cybersecurity, or a related field. 5+ years of experience in security analysis, incident response, or a related field. AWS Security Certification or equivalent experience.

Relevant industry certifications, such as CISSP, CISM, GIAC Certified Incident Handler (GCIH), or Offensive Security Certified Professional (OSCP).

In-depth knowledge of security principles, concepts, and best practices.

Strong understanding of network protocols, operating systems, and common vulnerabilities.

Proven experience applying Infrastructure as Code (IaC) principles and utilizing scripting/automation, along with contemporary AI assistants, to streamline daily security workflows and incident response.

Firm understanding of containerization and orchestration platforms (Kubernetes, Helm, Docker) along with robust image and dependency management practices.

Knowledge of security frameworks and standards, such as NIST, ISO 27001, and CIS Controls.

Familiarity with regulatory requirements, such as PCI DSS and GDPR.

Understanding of the threat landscape surrounding AI technologies, specifically evaluating and securing cloud and agent-based models.

Strong analytical and problem-solving skills, paired with excellent communication and collaboration abilities.

Specific Technology Stack Experience (Note: Experience with equivalent or similar tools is completely acceptable) : Logging & SIEM: Splunk.

Cloud & Endpoint: Crowd

Strike (Host and CSPM), AWS Security, Cloud Firewalls (AWS/Fortinet).

Automation & IaC: Terraform, Cloud

Formation, Ansible,



or similar automation frameworks and scripting languages (e.g., Python, Bash).

Containers & Orchestration: Kubernetes, Helm, Docker, and dependency/image management tools.

Pipeline Security: CI/CD pipeline security (DAST/SAST/SCA), such as Sonarcloud, Snyk, Git

Hub, Quay, and Artifactory.

Network & Edge: Cloudflare/Cloud

Front (DDoS, WAF, CDN), ZScaler (ZTA).

Vuln Management: TenableIO (Vulnerability and Configuration Management).

SaaS & Email: Proofpoint (DNS/Mail), Google Workspace, Atlassian, Slack.

Device Management: Mac-based MDM systems like IRU or Kandji.

For more current job opportunities, Follow Match

Box at linkedin.com/company/matchbox-recruitment/ _________________________ About Match

Box Headquartered in downtown Vancouver and serving clients nationally, Match

Box is one of the leading recruitment and solutions firms that specializes in the fields of IT & Technology, Engineering & Technical, Real Estate & Construction, and Accounting & Finance.

We offer unrivaled expertise with our team''s extensive experience in the recruitment and professional services industry.

We are dedicated to building great connections and creating strong opportunities within the workforce and the labor market.

Equal Opportunities Match

Box is committed to providing equal opportunities for all applicants.

We welcome and encourage applications from people of all backgrounds, including members of minority groups such as racialized individuals, people with disabilities, LGBTQ+ individuals, and Indigenous peoples.

It is a priority for us that all candidates are treated fairly and without discrimination.

Our recruitment teams receive ongoing training on using objective criteria for evaluating candidates and other related topics to create an inclusive and welcoming environment for all.

Work Permits Please note that we require all interested candidates to obtain the necessary work permits from the Government of Canada prior to submitting an application.

This position is open exclusively to individuals residing in Canada and legally authorized to work in Canada.

Applications not meeting these criteria will not be considered.

Further Consideration We receive a high volume of applications and are only able to contact candidates who are selected for further consideration.

Find out more at

📌 Senior Security Engineer (Vancouver)
🏢 MatchBox Consulting Group
📍 Vancouver