Senior Security Engineer

About Us:

With $313.7 billion of gross assets under management, as of March 31, 2026, British Columbia Investment Management Corporation (BCI) is the provider of investment management services for British Columbia’s public sector and one of the largest asset managers in Canada. BCI seeks investment opportunities around the world and across a range of asset classes that convert savings into productive capital. Our investment returns play a significant role in helping our institutional clients build a financially secure future for their beneficiaries.

Headquartered in Victoria, British Columbia, and with teams spanning Vancouver, New York, London, and Mumbai.

BCI integrates environmental, social, and governance (ESG) factors into all investment decisions to meet clients’ risk and return requirements. Our people shape employee-focused initiatives, creating a strong culture. To learn more about our culture and values, visit our  BCI Values in Action  page.

Closing Date:
Open Until Filled

ITIQ, in partnership with British Columbia Investment (BCI) is seeking an experienced Senior Security Engineer to join the Security Engineering and Operations team.

Reporting to the Senior Manager, Cyber Security Engineering & Operations, the Security Engineer is responsible for security processes, technologies, and projects with various levels of complexity. The Security Engineer will be instrumental in developing security requirements and designing and implementing security solutions.

The Security Engineer collaborates and communicates with business and technology teams in an Agile hybrid environment and enables the effective and efficient delivery of secure, quality products. At all levels, the Security Engineer may be assigned to one or more focus areas requiring additional specialized expertise and responsibilities.

WHAT YOU BRING

Bachelor’s degree in technology, engineering, computer science, or a related field

A minimum of 5 years of experience in progressively senior technical roles with responsibility focused on information security processes, products, and projects

Very strong knowledge in engineering secure systems

Experience with securing cloud environments (MS Azure)

Must have excellent documentation, customer-service, listening, communication and problem-solving skills

Must be able to implement programs, security technologies and solutions to measure and sustain the security posture of large, complex environments

Experience with Agile methods (Scrum) and Dev Ops practices is an asset

Professional certifications such as Global Information Assurance Certification (GIAC), Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Certified Information Security Manager (CISM) or equivalent experience is essential

TECHNICAL SKILLS AND REQUIREMENTS
Must have some combination of strong hands-on experience with at minimum 4 or 5 of the following skills or technologies:

Identity and access management systems for hybrid environments

Secure coding practices

Systems engineering

Ethical vulnerability research and threat modeling

Windows, UNIX, and Linux operating systems security, virtualization technology security, container security and serverless computing security

Privileged access management systems for hybrid environments

EDR and/or other endpoint protection technologies

Firewall, intrusion protection and intrusion detection systems

Zero Trust system design

Cloud Native Application Protection Platform (CNAPP) systems

Secure application design principles

Data Classification and DLP solutions

Enterprise vulnerability management, including vulnerability assessment, remediation, and reporting

Incident response

Various networking technologies, including subnetting, NAC, DNS, encryption technologies and standards, VPNs, VLANs, VoIP and other network routing methods

Phishing and social engineering

YOUR DAY TO DAY - WHAT YOU GET TO DO

Development of new and innovative ways to solve existing production security issues as well as evaluate new technologies and processes that enhance security capabilities

Develops technical security requirements for new products, tools and services envisioned for implementation at BCI

Help and guide projects during solution design phase

Collaborates and coordinates with application, operations, and product teams to provide guidance on the development of secure product designs that meet security requirements

Architects, analyzes, and recommends security controls and procedures in business…