Security Engineer, Application Security (Victoria)

About the Role BCI’s Cyber Security team is looking for a specialized Application Security Engineer to embed alongside development teams and help secure the software BCI builds, from design through deployment. Based in Vancouver or Victoria, this role sits at the intersection of software engineering and security, requiring deep hands‑on experience with application security practices including AI‑assisted development. Responsibilities Ensure all software solutions built by BCI conform to best practices for writing secure software. Develop security requirements and design and implement security solutions. Collaborate and communicate with business and technology teams in an Agile hybrid workplace. Securely design development environments, pipelines, and AI‑enabled and low‑code/no‑code environments. Develop new and innovative ways to solve production security issues and evaluate new technologies. Provide guidance during solution design and help projects meet security requirements. Communicate complex security issues to non‑technical stakeholders and develop security user stories. Respond to information security issues throughout a project’s lifecycle. Proactively identify risks and propose solutions to remove barriers. Document designs and produce technical reports in support of security initiatives. Consult on designs, implementations, and maintenance of DevSecOps pipelines that integrate security testing. Develop and maintain secure coding standards, guidelines, and training materials. Conduct application security assessments, threat modeling sessions, and architecture reviews. Champion a security culture by embedding into Agile development teams as a subject‑matter expert. Triage and prioritize application security vulnerabilities and work with development teams on remediation strategies. Develop and maintain security testing automation for continuous assurance of application security posture. Monitor emerging application security threats and propose new solutions. Lead and complete security risk reviews on software. Perform other related duties as required. Qualifications Bachelor’s degree in Technology, Engineering, Computer Science, or a related field. Minimum of 5 years of experience in progressively senior technical roles focused on information security processes, products, and projects. Very robust knowledge of secure system engineering. Experience securing cloud environments (MS Azure). Excellent documentation, customer‑service, listening, communication and problem‑solving skills. Experience implementing programs, security technologies and solutions to maintain security posture of large, complex environments. Experience with Agile methods (Scrum) and DevOps practices is an asset. Professional certifications such as GIAC, CISSP, OSCP, CISM or equivalent experience are essential. Technical Skills Identity and access management systems for hybrid environments. Secure coding practices. Systems engineering. Ethical vulnerability research and threat modeling. Security of Windows, UNIX, and Linux operating systems, virtualization technology, container security and serverless computing. Privileged access management systems for hybrid environments. EDR and/or other endpoint protection technologies. Zero Trust system design. Cloud Native Application Protection Platform (CNAPP) systems. Secure application design principles. Data Classification and DLP solutions. Enterprise vulnerability management, including assessment, remediation and reporting. Phishing and social engineering. Programming languages such as Python, JavaScript/TypeScript, Java, C# or Go. Knowledge of AI/ML application security considerations, including prompt injection prevention and model security. Location & Work Arrangement There is a solid preference for Victoria, BC; however, Vancouver, BC will be considered for the right candidate, with occasional travel to Victoria. BCI is an in‑person collaborative organization with the flexibility to work remotely one day a week. Salary & Benefits The annualized base salary range for this Victoria or Vancouver based role is CAD $125,000 to $150,000. BCI offers a competitive total rewards package, including a performance‑based incentive plan, comprehensive health and dental benefits, a defined benefit pension plan, and paid time off. Equal Employment Opportunity BCI welcomes all qualified candidates who are legally authorized to work in the country where this job is located. We value diversity and foster an inclusive culture where all employees can thrive. Apply on Kit Job: kitjob.ca/job/2prlib