Senior IT Security Engineer

Match Box Consulting is currently seeking an Senior IT Security Engineer for a 6-month contract role with our Vancouver/Victoria based client. Work may be done remotely within BC but preference will be given to local candidates who can work at either the Victoria or Vancouver office for 3-4 working days per week.. Expected working hours will be 7 hours a day from 8:30AM to 4:30PM, PDT, five (5) days per week.

Senior IT Security Engineer
Department Overview
The Technology team serves as a strategic partner to business units across the organization. The team enables critical business processes and operational activities through the delivery of secure, scalable, and innovative technology solutions. Responsibilities include developing digital capabilities, modernizing services and products, supporting collaboration and productivity platforms, and maintaining the infrastructure, systems, business applications, and advanced technologies that support front-, middle-, and back-office operations.
Position Summary
Reporting to the Manager, Dev Sec Ops , the Senior IT Security Engineer is responsible for security processes, technologies, and initiatives of medium to high complexity. This role plays a key part in defining security requirements and designing, implementing, and maintaining security solutions across enterprise environments.
The successful candidate will collaborate with cross-functional teams in an Agile and hybrid work environment to support the delivery of secure, high-quality technology solutions. This position requires strong technical expertise in application security, cloud security, secure software development practices, and vulnerability management.
Qualifications

• Bachelor's degree in Information Technology, Engineering, Computer Science, or a related discipline.
• Minimum of 8–10 years of progressively senior experience in technical roles focused on information security, security engineering, and related projects.
• Strong expertise in secure software engineering principles and practices.
• Experience securing cloud environments, particularly Microsoft Azure.
• Excellent customer service, communication, listening, and problem-solving skills.
• Demonstrated ability to design and implement programs that measure, improve, and sustain security posture across complex enterprise environments.
• Ability to communicate complex security concepts and develop security requirements and user stories for both technical and non-technical stakeholders.
• Experience working within Agile methodologies (Scrum) and Dev Sec Ops  practices is considered an asset.

• Selection, implementation, and operationalization of application security testing tools, including SAST, DAST, IAST, and SCA within enterprise CI/CD pipelines.
• Secure API design and security controls, including OAuth 2.0, OpenID Connect, and API gateway security.
• Secure coding practices, threat modeling, and ethical hacking techniques.
• AI/ML application security, including prompt injection prevention, model security, and emerging AI-related threats.
• Vulnerability assessment, remediation, and reporting processes.

• Proficiency in one or more programming languages such as Python, JavaScript/TypeScript, Java, C#, or Go.
• Authentication, authorization, and encryption technologies.
• Identity and privileged access management for on-premises, cloud, and hybrid environments.
• Application security and encryption solutions.
• Web application proxy technologies, including SSL/TLS decryption.
• Penetration testing and vulnerability assessment methodologies.
• Platform and infrastructure security.
• Industry certifications such as GWAPT, GWEB, CSSLP, CEH, OSWE, or equivalent experience.

• Lead the evaluation, selection, implementation, and optimization of SAST, DAST, IAST, and SCA tools, including integration into CI/CD pipelines.
• Develop remediation guidance, standards, procedures, and runbooks for security findings.
• Partner with Dev Sec Ops  and development teams to establish and maintain secure coding standards, security guidelines, and training materials.
• Conduct application…