Publié le mois dernier
Senior IT Security Engineer
@ Zema Global Data Corporation
Vancouver, Colombie-Britannique
SIGNAUX
En bref
Zema Global Data Corporation is hiring a Senior IT Security Engineer in Vancouver on a full-time permanent basis, with a hybrid schedule of two office days per week. The role secures cloud platforms (AWS, Azure), CI/CD pipelines, SIEM/SOAR monitoring and application security, and supports SOC 2 and ISO 27001 compliance. No visa sponsorship is available.
Responsabilités :
- Design and implement cloud-native security controls on AWS
- Run security monitoring and incident response with SIEM and SOAR
- Embed SAST, DAST and secure code reviews in CI/CD pipelines
- Lead vulnerability management, remediation and penetration test follow-up
- Support SOC 2 and ISO 27001 compliance with technical evidence
Résumé des exigences :
- Senior security engineering experience in cloud-first or DevSecOps environments
- Hands-on cloud security experience with AWS and Azure, including CSPM
- Application security experience with OWASP Top 10 remediation
- Bachelor's degree or equivalent practical experience
- Certifications such as CISSP, CISM, CCSP or AWS Security preferred
Outils et compétences
Source et dates
Type de source non vérifié · apify-linkedin
- Date publiée par l’employeur
- 2026-10-13
- Première détection par notre source
- 2026-11-14
- Mise à jour du dossier source
- 2026-11-14
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Senior |
| Domaine | Développement logiciel |
| Heures par semaine | 40 (estimé) |
| Milieu de travail | Bureau |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Langues | English |
| Permis et certifications | CISSP, CISM, CCSP, AWS Security |
| Formation | Baccalauréat (exigé) |
| Domaines d’études | Computer Science, Information Security, Engineering |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Zema Global Data Corporation
| Champ | Valeur |
|---|---|
| Offres sur Jobsy | 1 |
Description
Senior IT Security Engineer | Work model: Hybrid (in office twice per week) Location: Vancouver, Canada | Full-time, Permanent | Industry: Commodities & Energy
No sponsorship is available
About Us
Founded in 1995, Zema Global Data Corporation empowers organizations to simplify complexity, reduce risk, and make faster, more confident decisions that drive measurable results. Over the past two years, Zema Global has accelerated its growth through strategic investment and acquisition to strengthen our global leadership. Together we’re helping our customers gain a Decisioning Advantage – one bold idea at a time. With a presence across global energy, commodity, and financial markets, Zema Global empowers customers to simplify complexity, reduce risk, and make faster, more confident decisions that drive measurable results.
At Zema Global, we Think Big, Make It Happen, and Win as One. We thrive on collaboration, creativity, and respect, united by a shared drive to innovate and deliver meaningful impact for our customers and communities. If you’re inspired by solving complex challenges and contributing to a culture that values purpose and performance, we invite you to join us.
Candidate Requirements; Senior IT Security Engineer:
Essential
No sponsorship is available
About Us
Founded in 1995, Zema Global Data Corporation empowers organizations to simplify complexity, reduce risk, and make faster, more confident decisions that drive measurable results. Over the past two years, Zema Global has accelerated its growth through strategic investment and acquisition to strengthen our global leadership. Together we’re helping our customers gain a Decisioning Advantage – one bold idea at a time. With a presence across global energy, commodity, and financial markets, Zema Global empowers customers to simplify complexity, reduce risk, and make faster, more confident decisions that drive measurable results.
At Zema Global, we Think Big, Make It Happen, and Win as One. We thrive on collaboration, creativity, and respect, united by a shared drive to innovate and deliver meaningful impact for our customers and communities. If you’re inspired by solving complex challenges and contributing to a culture that values purpose and performance, we invite you to join us.
Candidate Requirements; Senior IT Security Engineer:
Essential
- The Senior IT Security Engineer will demonstrate experience in a senior or advanced security engineering role within a cloud-first or DevSecOps environment, supporting production systems and modern application architectures.
- Strong hands-on experience securing cloud platforms, with a focus on Azure, AWS, including network security and cloud security posture management (CSPM).
- Proven application security experience, including secure code reviews, SAST and DAST implementation, and hands-on remediation of OWASP Top 10 vulnerabilities in collaboration with development teams.
- Experience integrating security into CI/CD pipelines and release processes, supporting secure software delivery through automation and policy-driven controls.
- Practical experience in security monitoring and incident response, including working with SIEM and SOAR platforms
- Bachelor’s degree in computer science, Information Security, Engineering, or a related field, or equivalent practical experience.
- Relevant industry certifications (such as AWS Security, CISSP, CISM, CCSP, or equivalent) or demonstrated equivalent experience in security engineering and cloud security.
- Experience integrating native cloud security tools and aligning them with organizational use cases to enhance overall security posture.
- Strong understanding of secure system design principles, including least privilege, defence in depth, encryption, and secure configuration management.
- Familiarity with container and Kubernetes security, including image scanning, runtime protections, and secure configuration practices.
- Hands-on experience with Wiz (cloud security posture management) and Microsoft Defender for Endpoint.
- Exposure to advanced detection and response use cases, such as custom SIEM queries, SOAR playbook development, or tuning alerting for reduced noise.
- Knowledge of additional security frameworks or regulations, such as NIST CSF, NIST 800-53, beyond SOC 2 and ISO 27001.
- Experience supporting external audits or client security assessments, including responding to security questionnaires or providing technical evidence.
- Scripting or automation skills (e.g., Python, Bash) to support security tooling, integrations, or process automation.
- Ability to work across global or distributed teams, with experience collaborating across time zones and cultures.
- The Senior IT Security Engineer will design and implement cloud-native security controls across AWS infrastructure, platforms, and applications to protect systems and data while enabling scalable business growth.
- Perform regular risk analysis across cloud environments and responsible for the definition and implementation of remediation activities, in a timely and coordinated manner
- Operate and enhance security monitoring and response capabilities through the deployment and continuous improvement of SIEM and SOAR solutions to enable timely detection, investigation, and response to security events
- Work with the SMEs to ensure security is embedded into CI/CD pipelines and development workflows by implementing automated security testing, policy enforcement, and secure-by-default configurations aligned with DevSecOps principles.
- Advise SMEs to ensure application security is embedded into the development lifecycle by supporting SAST, DAST, and secure code reviews, and by working directly with developers to remediate OWASP Top 10 risks.
- Continuously assess and improve AWS cloud security posture by implementing and maintaining CSPM controls to identify misconfigurations, reduce exposure, and enforce security best practices.
- Align technical security controls with CIS benchmarks and frameworks to strengthen baseline security configurations and support consistent, repeatable security outcomes
- Partner with engineering, platform, and IT teams to provide security architecture guidance, threat modelling, and secure design reviews that balance risk management with delivery velocity.
- Act as the first point of escalation during the security incident detection and response to security events, also supporting investigations, and coordinating timely remediation to reduce risk and business impact.
- Lead vulnerability management and remediation validating efforts, by prioritizing risks, verifying fixes, and working with IT & DevOps teams to ensure timely and effective resolution.
- Support penetration testing and remediation efforts by coordinating technical activities, validating remediation actions, and confirming closure of identified findings.
- Contribute to SOC 2 and ISO 27001 compliance by implementing, operating, and evidencing technical security controls that are practical, auditable, and aligned with organizational policies.
- Automate security processes and controls to improve consistency, reduce manual effort, and scale security operations in a cloud-first environment.
- Support continuous improvement of security operations by providing technical expertise, contributing to post-incident reviews, identifying control gaps, and implementing improvements that enhance resilience and reliability.
- Collaborate across teams to promote shared security ownership by communicating clearly, providing guidance, and enabling teams to build and operate secure system
- The Senior Security Engineer is a key contributor to securing a cloud-first, DevSecOps driven environment, responsible for embedding security into cloud platforms, with a strong focus on automation, scalability, and resilience.
- Working closely with Engineering, DevOps, this role ensures the integration of security into CI/CD pipelines, cloud infrastructure, and application architectures while supporting compliance with SOC 2 and ISO 27001.
- This position involves a combination of hands-on execution and strategic advisory responsibilities and essential to enabling secure growth, maintaining customer trust, and ensuring the organization meets its security and compliance commitments without compromising delivery.
- Be part of a rapidly growing company shaping how data drives decisions in energy and commodities.
- Work with cutting-edge technology alongside industry experts.
- Significant opportunity to impact strategy, revenue growth, and decision-making.
- Join a meritocratic culture that values innovation, collaboration, and autonomy to drive meaningful change.
- No visa sponsorship is available for this position ***
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.