BenchSci

We are looking for a Senior Security Engineer to join our growing Infrastructure &amp; Security team! Reporting to the team's Engineering Manager, you will help validate that BenchSci's services are implemented to the highest security standards. You will also analyze the security of applications and services, discover and address security issues, build security automation, and quickly react to new threat scenarios. Importantly, you will take the lead on all security-related matters and help us to ensure that all classified client data is kept confidential.BenchSci is a remote-first organization. At this moment, we are welcoming applicants from Canada and the US for this position.
<h3>You Will:</h3>
<ul>
<li>Perform application security reviews</li><li>Drive outcomes with team members to improve our application security posture</li><li>Create application security guidance and best practices documentation</li><li>Build tools and libraries to help developers create secure software</li><li>Champion security at BenchSci</li><li>Maintain and improve the GDPR and SOC2 security compliance tracking and remediation efforts</li><li>Triage and drive resolutions for security vulnerabilities in the BenchSci Platform</li><li>Lead security engagements like third-party penetration tests and tabletop exercises</li><li>Uncover infrastructure and application-level vulnerabilities as part of internal audits</li><li>Conduct system design reviews and guide engineers in building security into our architecture</li></ul>
<h3>You Have:</h3>
<ul>
<li>4+ years working as a software engineer with at least 2 years of experience in security</li><li>Experience dealing with internal/external security audits and penetration tests</li><li>Experience with any combination of the following: threat modelling experience, secure coding and SDLC practices, OWASP Top 10 application security risks, and network security</li><li>An understanding of network and web-related protocols (such as TCP/IP, UDP, IPSEC, HTTP, HTTPS, and routing protocols)</li><li>Experience configuring and tuning application security testing tools (SCA, SAST, and DAST)</li><li>An understanding of web services and an ability to reason the application code that drives them</li><li>Experience with Infrastructure as Code tools such as Terraform, CloudFormation or Config Connector</li><li>Knowledge of industry security frameworks like the CIS Benchmarks or OWASP ASVS</li><li>A background in security and compliance audits such as GDPR and SOC2</li></ul>Benefits and Perks: An engaging remote-first culture A great compensation package that includes BenchSci equity options15 days vacation plus an additional day every year; plus company closures for 15 more days throughout the yearUnlimited flex time for sick days, personal days, religious holidaysComprehensive health and dental benefits Emphasis on mental health with $2500 CAD* for Psychologist, Social Worker, or Psychotherapist servicesA $2000 CAD* Annual Learning &amp; Development budgetA $1000 CAD*  home office set-up budgetA $2500 CAD*wellness, lifestyle and productivity spending account for employees  Generous parental leave benefits with a top-up plan or paid time off options*Benefits are tied to Canadian dollar amounts and would be converted to local currency for those in other countries. Moving to local currency allotments in the future. About BenchSci:BenchSci's vision is to help scientists bring novel medicine to patients 50% faster by 2025. We empower scientists to run more successful experiments with the world's most advanced, biomedical artificial intelligence software platform. Backed by F-Prime, Inovia, Golden Ventures, and Google's AI fund, Gradient Ventures, we provide an indispensable tool for scientists that accelerates research at 16 top 20 pharmaceutical companies and over 4,300 leading academic centers. We're a certified Great Place to Work®, and top-ranked company on Glassdoor. Our Culture:BenchSci relentlessly builds on its strong foundation of culture. We put team members first, knowing that they're the organization's beating heart. We invest as much in our people as our products. Our culture fosters transparency, collaboration, and continuous learning. We value each other's differences and always look for opportunities to embed equity into the fabric of our work. We foster diversity, autonomy, and personal growth, and provide resources to support motivated self-leaders in continuous improvement. You will work with high-impact, highly skilled, and intelligent experts motivated to drive impact and fulfill a meaningful mission. We empower you to unleash your full potential, do your best work, and thrive. Here you will be challenged to stretch yourself to achieve the seemingly impossible.  Learn more about our culture.Diversity, Equity and Inclusion: We're committed to creating an inclusive environment where people from all backgrounds can thrive. We believe that improving diversity, equity and inclusion is our collective responsibility, and this belief guides our DEI journey.  Learn more about our DEI initiatives.Accessibility Accommodations: Should you require any accommodation, we will work with you to meet your needs. Please reach out to talent@benchsci.com.#LI-Remote

Vancouver

Senior Software Engineer, Security (Remote)

Copperleaf

Copperleaf’s enterprise software helps some of the world’s largest energy firms make better strategic decisions. We have a track record of delivering award-winning, industry-changing solutions. Join our team as we continue to enable our clients to build more resilient and sustainable infrastructure.
We are looking for a Senior Application Security Specialist to join our software development team to enhance the practice of application security planning and development at Copperleaf. This individual will utilize their software development and application security expertise to ensure excellence in our processes and tooling for secure software development and to ensure that our products are secure.
Responsibilities:
<ul>
<li>Education and training of the wider development team to enhance our Secure Software Development Lifecycle (SSDLC).</li>
<li>Staying abreast of emerging trends and best practices in application security and bringing these to the Copperleaf team.</li>
<li>Security reviews and threat modeling for the application and for key future initiatives.</li>
<li>Guide and advise development teams in application security and compliance.</li>
<li>Guide the adoption of automated security testing to validate that secure coding best practices are being used.</li>
<li>Translate security risks to business impact and advise product leadership and the entire group.</li>
<li>Understand and communicate key gaps in our SSDLC and identify and lead improvements.</li>
</ul>
About you:
You have experience in the following areas:
<ul>
<li>Enterprise software technologies, application security, and infrastructure.</li>
<li>The Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM).</li>
<li>Amazon Web Services or other cloud computing platform architecture, offerings, and security related services.</li>
<li>Web application security scanning software and related penetration testing tools.</li>
<li>Articulating technically advanced issues to all audiences. Comfortable working with diverse sets of stakeholders, including development teams, product management, and senior leadership.</li>
<li>Training and mentoring software development teams in security-related topics.</li>
<li>Ability to work under pressure, establish priorities and respond with urgency.</li>
</ul>
Experience:
<ul>
<li>4+ years of advanced security experience.</li>
<li>Minimum of 10 years application development experience ideally within the Microsoft development stack.</li>
<li>Applicable certification strongly desired (CSSLP, GWEB etc.) or obtained within 6 months of employment.</li>
</ul>
What’s it like here? 
At Copperleaf, we’re committed to building a great culture because we know it sets us apart. Culture is at the very core of everything we do, and it’s what makes people want to be part of the market-leading company we’re building. We are a global team of world-class innovators continually pushing the limits of what’s possible to deliver exceptional value and extraordinary experiences to our clients. To do that, we actively cultivate an open and supportive team environment, where diverse ideas and perspectives are encouraged and respected.Headquartered in Vancouver, Canada, Copperleaf is building a better world, one decision at a time. As one of Canada’s Fastest-Growing Companies, winner of Canada’s Most Admired Corporate Cultures and the BC Tech Association’s Tech Culture of the Year, we are a dynamic and disruptive organization offering exciting opportunities for growth and innovation.Diversity, Equity, and Inclusion are at the heart of Copperleaf’s culture and play a vital role in our growth strategy. We are committed to ensuring that everyone feels a sense of belonging and can contribute to their maximum potential. Our differences are the reason great things happen here. If you are an applicant in need of accommodation or special assistance throughout the interview process, please submit a request by email to exsupport@copperleaf.com.

Senior Application Security Specialist

Aviso Wealth

Aviso Wealth: At Aviso Wealth, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to service, partnership, and innovation. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic culture sets Aviso Wealth apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso Wealth has to offer at www.aviso.ca. The Opportunity: We’re looking for a Security Analyst to join or Information Security team. Reporting to the Senior Manager of Information Security, the Security Analyst is responsible for ensuring the security of Aviso at every level of the stack. You will be setting security controls and design requirements during the feature design &amp; development stage of the software lifecycle. You will also help ensure that security across all aspects of the software is uniform by setting up checkpoints and reviews. Who you are: <ul> <li> Service – You consider both internal and external stakeholders and demonstrate intent of understanding and putting the clients’ needs first. You advocate service excellence and work to deliver solutions that meet the needs. You proactively develop strategic partnerships that allow Aviso Wealth to become a trusted advisor and partner</li> <li> Execution – You are committed to achieving your goals and to succeed. This includes focusing on “getting things done”, as well as recognizing and taking advantage of opportunities as they arise. You are consistently looking for ways to improve your personal best and see value in continuous improvement. You take accountability for your actions and learn from mistakes</li> <li> Collaboration – You work collaboratively with others with the common goal of driving positive results. Making meaningful contributions to your team to achieve organizational goals is a priority. You proactively encourage collaboration, build trust and inclusion, and work to establish effective relationships both inside and outside of the organization</li> </ul> What your day looks like:<ul> <li>Security assessments through code reviews, automation and security audits</li> <li>Implementing security controls and checkpoints to detect and prevent security issues early in cycle</li> <li>Work with engineering and product teams in the design phase of products and features, conducting threat modeling and security architecture, design</li> <li>Implement various types of scanning (SAST, SCA, DAST, etc.) in our CI/CD pipelines and ensure results are appropriately surfaced to developers</li> <li>Work with the product management teams to prioritize fixes for vulnerabilities and work with engineering teams to understand how to fix these issues</li> <li>Design tooling and frameworks to make adoption of security best practices easier for developers when working in our code bases</li> <li>Assist in the creation and maintenance of security training</li> </ul>RequirementsYour experience and skills: <ul> <li>College diploma or university degree in Computer Science or related field</li> <li>You have 4+ years of experience working on a security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development</li> <li>Demonstrate an in-depth knowledge of a broad range of hardware and software products; IIS, .NET/Java, and SDLC concepts &amp; tools such as Azure DevOps, Ansible, Jenkins, Git, etc.</li> <li>Proven experience in the application security domain with secure development practices</li> <li>Hands on Threat modeling, security risk assessment experience is a plus</li> <li>Experience automating application security testing tools and secure DevOps practices</li> <li>Knowledge of penetration testing procedures with industry standard toolsets</li> <li>Basic understanding of CI/CD pipelines</li> <li>Knowledge of OWASP security principles</li> <li>Experience with Application Security Testing tools like Burp Suite</li> <li>Excellent communication and articulation skills</li> <li>Highly motivated self-starter</li> <li>Strong time management and organizational skills; ability to multi-task and manage competing priorities</li> <li>Experience in the financial industry an asset</li> <li>Fluent Communication skills in English are required and bilingual communication skills in French are an asset</li> </ul>BenefitsWhy Aviso Wealth? At Aviso Wealth, you will find a dynamic and inclusive culture that rewards innovation and celebrates success. Here are a few things that set us apart: <ul> <li>Competitive compensation package that rewards and recognizes individual contributions <li>Excellent health, dental and insurance benefits to meet the diverse needs of our employees</li> <li>Generous vacation time, fitness benefit, parental leave top-up options</li> <li>Matching contributions to our retirement program</li> <li>Commitment to the continuous improvement of our staff through learning &amp; development and an education assistance program</li> <li>Regular social events to foster teamwork</li> </ul> Equal Employment Opportunity Aviso Wealth welcomes and encourages applications from all qualified individuals including persons with disabilities. If you require an accommodation, we will work with you to meet your needs in all stages of the hiring process. We thank all applicants for their interest, however, only those selected for further consideration will be contacted. No recruiters or agencies, please. Company Overview: Aviso Wealth is a national, integrated financial services company, with over $100 billion in assets under administration and management. Aviso Wealth is owned by Credit Union Centrals, The Co-operators / CUMIS and Desjardins. Our MFDA-regulated dealer, full-service IIROC-regulated brokerage, and insurance dealer support thousands of financial advisors at credit unions across Canada. Our award-winning online brokerage, Qtrade Direct Investing, and our digital advice platform, VirtualWealth, give Canadians flexible choices for building their wealth. Our asset manager, NEI Investments, is a Canadian leader in Responsible Investment funds and portfolios, which are available through a national network of advisors. Aviso Wealth also provides custodial services and introducing broker services to independent financial organizations, including banks, trust companies, insurance companies, investment dealers, portfolio managers and financial planning firms. We have operations in Toronto, Vancouver, and Montreal with a regional office in Winnipeg. More information about Aviso Wealth is available at www.aviso.ca.

Security Analyst - 14 months

Netskope

About Netskope
Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 
Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.
 
Job Duties
Netskope’s customers include some of the largest Fortune 500 companies that demand best in class customer support. You will be the primary point of contact for dealing with top class IT administrators.
In this job you will:
<ul>
<li>Be the primary point of contact for all support and escalations tickets</li>
<li>Be intuitive and inventive by providing solutions and workarounds for customers</li>
<li>Work with Customers, Sales Engineers, Customer Success to report issues to Engineering Team</li>
<li>Regularly communicate status update to Customers</li>
<li>Receive functional, performance and security issues from Customers and promptly follow-up with Engineering and DevOPS</li>
<li>Self-starter with ability to multi-task in a high-pressure, fast-paced, fast growth environment</li>
<li>Write technical notes, application notes, case studies, knowledge base entries, and solutions for the Support Portal</li>
<li>Follow published SLA for turning requests around in a timely manner</li>
</ul>
Qualifications/Requirements
<ul>
<li>5+ years of experience in supporting large enterprise customers</li>
<li>Strong TCP/IP knowledge</li>
<li>Excellent knowledge and prior experience supporting network security technologies such as: Proxies, NG Firewalls, SSL/IPSec, VPN’s, SSO</li>
<li>Familiarity with DLP and Encryption gateways.</li>
<li>Demonstrable experience with systems installation, configuration and administration of UNIX/Linux and Windows­ based systems (prior Active Directory/LDAP experience desirable)</li>
<li>Expert in troubleshooting various scenarios and systems by using knowledge of common tools (tcpdump) and protocols (TCP/IP, NTP, DNS, DHCP, etc.).</li>
<li>Familiarity with cloud apps and services</li>
<li>Strong empathy for customers AND passion for revenue and growth</li>
<li>Excellent Communications and Interpersonal Skills required, with a passion for the Cloud and related new technologies.</li>
<li>Prior experience working with Zendesk or other support portal tools</li>
</ul>
<h3>Education:</h3>
<ul>
<li>Bachelors or Masters degree</li>
</ul>

#LI-AG2Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.

Cloud Security Engineer

Ntirety

COMPANY OVERVIEW: Ntirety provides Multi-Cloud Managed Solutions that enable IT to shift from managing operational risk to creating a future-ready, agile enterprise. Ntirety is THE only Managed Solutions Provider for multi-cloud solutions with guaranteed business outcomes. Our solutions are backed by the industry’s first and only Guidance Level Agreements (GLAs): actionable insights that improve mission-critical application security, cost, and agility. Our engineers in North America, Europe, and Asia deliver solutions that shift tactical Enterprise IT operations to business transformation for thousands of global customers. With fourteen data centers around the world, Ntirety also ensures strict compliance to PCI, HITRUST, HIPAA, FERPA, and GDPR guidelines and regulations. We are first and foremost a service company, enabled by technology… not the other way around. We believe that service is the core to creating a vibrant, “built-to-last” organization. Ntirety believes in fostering our team’s skills and experience to constantly enhance the services we deliver to our customers. For more information about Ntirety, please visit <a href="http://www.ntirety.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.ntirety.com</a>. RequirementsPOSITION PURPOSE: Ntirety is seeking a Compliance Service Delivery Manager to join our team. The Compliance Service Delivery Manager role is to deliver ongoing Compliance as a Service (CaaS) to Ntirety customers. The successful candidate will work with client personnel to help develop a compliance program and/or analyze, evaluate, and enhance their information systems facilitating their business internal control process. The Compliance Service Delivery Manager will use their theoretical and practical knowledge of Security Standards, HIPAA and HITRUST for the HealthCare sector, PCI and Sarbanes-Oxley for the financial sector, and domain aligned like ISO27001 and SSAE 18, to develop, implement, and deliver the measurable requirements necessary to develop and implement policies, processes and procedures for customers and audit them against those requirements. The Compliance Service Delivery Manager will work with the relevant internal and external entities Clients and/or Partners to ensure all compliance criteria, whether on the international scale (such as GDPR) or local scale (such as municipal environmental permits and reporting) is met. The Compliance Service Delivery Manager will work with Ntirety Business Units/Product Management to ensure customer’s service offerings are compliant. The tasks also include conducting regularly scheduled audits on internal systems and assisting third-party audits as required in order to maintain certifications and compliance certificates. The Compliance Service Delivery Manager develops, implements, maintains, and oversees enforcement of customer security policies and procedures and also plans and implements system security administration and user system access based on industry-standard best practices and compliance requirements. ESSENTIAL JOB DUTIES AND RESPONSIBILITIES:<ul> <li>Develop, implement and monitor a strategic, comprehensive enterprise information security, compliance, and IT risk management program for customers to ensure the integrity, confidentiality and availability of information owned, controlled or processed</li> <li>Develop, maintain and publish up-to-date security and compliance policies, standards and guidelines, and oversee training and dissemination of policies and practices for customers</li> <li>Create, communicate and implement for customers a risk-based process for vendor management, including assessment and treatment for risks</li> <li>Provide high quality professional management of audit engagements/projects and understand Ntirety’s service offerings and identify potential opportunities to improve such service offerings</li> <li>Maintain relationships with client management to manage expectations of service, including work products, timing, and the value to be delivered.</li> <li>Respond to security and compliance queries from customers or partners</li> <li>Support customers’ compliance needs by delivering an exceptional customer experience</li> <li>Perform risk based internal audits and assessments for customers</li> <li>Document and test Information Technology controls for customers using Governance, Risk and Compliance tools</li> <li>Manage customer compliance risk registers and assignments</li> </ul> DESIRED MINIMUM QUALIFICATIONS:<ul> <li>5+ years of experience in a combination of compliance, risk management, information security and IT jobs</li> <li>Experience and expert understanding of Governance, Risk and Compliance processes</li> <li>Experience developing information security policies and procedures</li> <li>Demonstrated Knowledge and understanding of relevant legal and regulatory requirements, such as SSAE 18, Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry/Data Security Standard (PCI-DSS), HITRUST, ISO 27001, the EU General Data Protection Regulations (GDPR), California Consumer Privacy Act (CCPA), NIST 800-171, the Cybersecurity Maturity Model Certification (CMMC) framework</li> <li>General knowledge of IT audit and risk management / assessment process</li> <li>Displays intellectual curiosity, innovation, creativity, persistence, commitment, passion and optimism</li> <li>Excellent oral and written communication skills</li> <li>The ability to build strong client relationships at all levels of an organization from business owners through the C-level management suite</li> <li>Self-motivated, results driven individual requiring minimal oversight that can work to accomplish goals in a collaborative environment</li> <li>Willing to learn and dive into new areas of regulatory compliance </li> <li>Must be flexible regarding program schedule changes and be willing to adapt to these changes in order to fulfill program deadlines</li> <li>Must be able to operate in a very dynamic and high productivity environment</li> <li>Must be able to identify potential sales opportunities for Ntirety customers that may complement CaaS</li> <li>Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials</li> <li>Prior experience working for a service provider</li> <li>An understanding of the Managed Security Services business model</li> <li>Highly professional with ability to work in challenging, diverse and evolving client environments </li> <li>Able to discuss and resolve audit issues and recommendations with client management.</li> <li>Demonstrate a thorough understanding of complex information systems and apply it to client situations.</li> <li>Experience with Federal Risk and Authorization Management Program (FedRAMP) or ability and willingness to train to this compliance objective for the team</li> <li>CISSP certification or ability and willingness to achieve as part of career growth goals</li> <li>CCIP/EU and or CCIP/US certification or ability and willingness to achieve as part of career growth goals</li> <li>Working knowledge of GRC tools such as LogicManager or similar</li> <li>Ability to uncover opportunities for businesses to improve their Compliance and Cybersecurity postures</li> </ul>PREFERRED SKILLS: <ul> <li>Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials</li> <li>Prior experience working for a service provider</li> <li>An understanding of the Managed Security Services business model</li> <li>Highly professional with ability to work in challenging, diverse and evolving client environments </li> <li>Able to discuss and resolve audit issues and recommendations with client management.</li> <li>Demonstrate a thorough understanding of complex information systems and apply it to client situations.</li> <li>Experience with Federal Risk and Authorization Management Program (FedRAMP) or ability and willingness to train to this compliance objective for the team</li> <li>CISSP certification or ability and willingness to achieve as part of career growth goals</li> <li>CCIP/EU and or CCIP/US certification or ability and willingness to achieve as part of career growth goals</li> <li>Working knowledge of GRC tools such as LogicManager or similar</li> <li>Ability to uncover opportunities for businesses to improve their Compliance and Cybersecurity postures</li> </ul>BenefitsNtirety is an Equal Employment Opportunity / Affirmative Action Employer (EEO/AA). Ntirety offersacompetitivesalaryandbenefitsincludingPaidTimeOff, FREE Medical to Employees, Dental,retirementplan with 401(k) match, andmuchmore.Ifyouareinterestedinjoiningaprofitable, growing,anddynamiccompany,wewanttohearfromyou! Ntirety isanEqual OpportunityEmployeranddoesnotdiscriminateonthebasisofrace,color,religion, sex,age,nationalorigin,disability,veteranstatus, sexualorientation,oranyother classificationprotectedby Federal,Stateorlocallaw. Ntirety thanks all candidates for their interest; however, only shortlisted candidates will be contacted.

Compliance Service Delivery Analyst

Apply to Cyber Security Jobs in Vancouver in companies remotely and near you. New Cyber Security Jobs in Vancouver added daily.

Job Position and Company	Location	Tags	Posted
Senior Software Engineer, Security (Remote) at BenchSci	Remote Full Time Manager Application Security
Senior Application Security Specialist at Copperleaf	Full Time Application Security
Security Analyst - 14 months at Aviso Wealth	Remote Full Time Analyst Manager Application Security
Cloud Security Engineer at Netskope	Full Time Windows
Compliance Service Delivery Analyst at Ntirety	Full Time CISM Audit Analyst Manager

Cyber Security Jobs in Vancouver

0 Cyber Security Jobs in Vancouver. Page 1 of 1

5 closed cyber security jobs in vancouver:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Vancouver

0 Cyber Security Jobs in Vancouver. Page 1 of 1

5 closed cyber security jobs in vancouver:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter