IFS
Senior Lead Application Security Engineer
Vancouver, British Columbia, Canada · Senior · Full-time
Sponsorship not specifiedDetected 26 days ago
PythonC#PowerShellCode ReviewGitAzureCloud PlatformsKubernetesTerraformCI/CDDevOpsLLMsAgentic AICybersecurityMicrosoft DefenderDetection EngineeringIncident ResponseComplianceCollaboration
About the role
- Our commitment to internal AI adoption has allowed us to stay at the forefront of technological advancements, ensuring our colleagues can unlock their creativity and productivity, and our solutions are always cutting-edge.
- We help solve some of society's greatest challenges, fostering a better future through our agility, collaboration, and trust.
Responsibilities
- Lead the security of our own agentic systems: defend against prompt injection, tool/MCP abuse, data exfiltration, excessive agency, and supply-chain risk in line with frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS.
- Drive proactive vulnerability management: remediate HIGH and CRITICAL CVEs across platform infrastructure and container images in line with contractual and compliance commitments, and automate the toil out of it.
- Partner with engineering teams to harden Azure Kubernetes Service (AKS) workloads, identity and access (Keycloak, Azure AD, Managed Identities, workload identity), network segmentation, and secrets management.
- Define and maintain security runbooks, detection logic, and incident response procedures, and build the agents that execute and accelerate them.
- Scripting and automation (e.g. Python, PowerShell, or C#) to build security tooling and orchestrate agents.
- You think proactively: you anticipate how systems will be attacked and build defenses ahead of the threat, rather than waiting to respond.
- You apply sound engineering judgment when making design and implementation decisions, balancing security rigor with developer velocity.
- You continuously develop technical and domain expertise in application security, cloud security, and the rapidly evolving field of agentic/AI security.
- You collaborate effectively within cross-functional, outcome-oriented teams.
Requirements
- You leverage AI to accelerate projects and improve overall quality of output, and you are excited to push the frontier of what agentic defense can do.
Nice to have
- OWASP Top 10 for LLMs and MITRE ATLAS a strong asset.
Skills
- IFS is a billion-dollar revenue company with 7000+ employees on all continents.
- agentic attacks require agentic defense.
- SAST, SCA, DAST, secrets and IaC scanning, SBOM generation, container signing and attestation, and pipeline access controls.
- Mend (SCA/SAST), Azure Defender for Cloud, and MDR/SOC platforms.
Compensation
- $117,000 CAD - $167,000 CAD
- Permanent, Full-time
- Use of Artificial Intelligence in Recruitment
- As part of our recruitment process, we may use automated tools, including artificial intelligence, to help screen and assess applications based on job‑related criteria such as skills, experience, and qualifications.
- These tools do not make hiring decisions.
- All employment decisions are reviewed and made by members of our hiring team.
This listing is sourced directly from IFS's careers page and normalized into a canonical job model.