1 day ago
Vancouver, CanadaSenior
Base Salary
$100k - $300k/yr
Responsibilities
- Configure, integrate, test, monitor, and improve enterprise security controls against security requirements, operational standards, and compliance obligations.
- Engineer, operate, and tune EDR, SIEM, WAF, IAM, DLP, firewall, secrets-management, and vulnerability-management technologies.
- Establish secure configuration baselines for Windows, Linux, cloud services, endpoints, network devices, applications, and supporting platforms.
- Implement least-privilege access, workload identity federation, credential rotation, and secure secrets management across applications and pipelines.
- Embed security controls into CI/CD pipelines, infrastructure-as-code, and deployment workflows while validating application and API security.
- Implement controls for AI and agentic applications, including workload identities, tool permissions, trust boundaries, human-in-the-loop approvals, and untrusted-input testing.
- Produce telemetry, logs, alerts, and evidence for monitoring, incident response, investigations, and PCI DSS compliance.
- Provide technical support during security incidents and investigations and contribute to root-cause analysis and corrective actions.
- Evaluate security technologies and integrations, conduct proof-of-concept testing, support architecture recommendations, and maintain technical documentation.
Requirements
- Bachelor’s degree in computer science, software engineering, cybersecurity, or equivalent practical experience in full-stack software engineering and cloud security engineering.
- Hands-on experience implementing, automating, and supporting Azure, GCP, or AWS cloud services and administering Entra ID, Exchange Online, and Microsoft 365.
- Strong software engineering background with proficiency in Python and PowerShell.
- Extensive experience building automation, working with REST APIs, managing GitHub Actions, Webhooks, and Repositories, and embedding security into CI/CD pipelines.
- Hands-on experience enforcing policy, posture, and endpoint security across hybrid fleets with Microsoft Intune for Windows, iOS, and Android and Jamf Pro for macOS.
- Experience monitoring and hardening multi-cloud environments with CNAPP tooling such as Wiz, Defender for Cloud, and GCP Security Command Center.
- Experience enforcing infrastructure-as-code policy-as-code, building automated remediation workflows, and converting recurring threat and vulnerability findings into engineering fixes.
- Experience with EDR, SIEM, WAF, DLP, Conditional Access policies, and associated technical prerequisites.
- Commitment to learning and applying Aritzia’s Business and People Leadership principles.
Benefits
- Product discounts and exclusive private shopping events.
- Up to 16 weeks of paid baby leave.
- Access to the subsidized A-OK Commissary & Cafe.
- Access to The SET in-office fitness studio, gym, classes, and optional personal training.
- 24/7 Aritzia Virtual Wellness resources.
- Aspirational, dog-friendly office workspaces with on-site amenities.
Tech Stack
Categories
About Aritzia
Aritzia is a Canadian fashion retailer and design house that sells in-house apparel and accessories direct to consumers online and in boutiques. Founded in 1984 and headquartered in Vancouver, it operates an e-commerce site and more than 140 stores across North America. Aritzia is a public company listed on the Toronto Stock Exchange (TSX).