Senior Security Engineer

Our Business
FISPAN Services Inc. (FISPAN) is an Enterprise SaaS FinTech company that allows banks to deploy embedded financial products and services to create a seamless banking connection for their corporate clients. Our product aims to provide instant scale and reach for banks who want to remove friction and add value by enabling their commercial banking clients to access banking services through their preferred ERP / accounting platform.
Founded in 2016 and headquartered in downtown Vancouver, FISPAN is on a mission to create the best product in the FinTech industry and fundamentally change the way that companies bank. Being the market leader in ERP Banking, we work with the world’s Tier 1 banks with assets exceeding $3T, including J.P. Morgan Chase, Wells Fargo, TD and Bank of Montreal.
We are looking for dynamic and passionate individuals to join our high performance team and contribute to our rapid growth and exciting journey.
Position Overview
As a Senior Security Engineer, you will provide senior-level expertise and advanced security analysis capabilities within our organization's security operations. Operating at a senior level, you will be a hands-on defender and attacker-mindset practitioner — running security monitoring, threat detection, and incident response, while proactively finding and closing gaps through vulnerability assessment and penetration testing. You will also apply that offensive mindset to the infrastructure you help secure: fine-tuning our SIEM, hardening cloud environments, implementing Zero Trust Architecture, and securing our CI/CD pipelines. You will champion an automation-first and AI-augmented mindset, using AI tooling and Infrastructure as Code (IaC) to scale detection, response, and testing across the board.
Note: This role operates on a hybrid schedule, requiring you to be in the downtown Vancouver office 1–3 days per week.
Security Operations & Threat Detection
Drive day-to-day execution of security operations, utilizing AI-assisted analysis to ensure rapid and proper coordination of incident response with all parties of interest.revised
Ensure all incident tickets are assigned, tracked, and resolved in compliance with operations SLAs.
Improve alert signal-to-noise ratios and integrate external threat intel with security monitoring tools.
Regularly update and continuously improve threat detection use cases, using AI tools to assist in rapid rule generation and threat modeling.
Continuously fine-tune our SIEM to reduce false positives, leveraging ML/AI capabilities to ensure pertinent data sources are onboarded and adequately parsed.
Offensive Security & Vulnerability Management
Plan and conduct internal penetration tests and vulnerability assessments across applications, networks, and cloud environments.
Demonstrate hands-on exploitation ability against common web vulnerabilities (e.g., SQL injection, XSS) to validate and clearly communicate findings — not just relying on scanner output.revised
Manually triage and identify complex or obfuscated attack patterns within raw log/SIEM data, beyond what pre-built alerts surface.revised
Perform red-team-style exercises and adversary simulation to validate detection and response capabilities, translating findings into concrete remediation and detection improvements.
Drive enterprise-wide vulnerability and configuration management, prioritizing and pushing remediation based on exploitability and business risk.revised
Coordinate and/or manage third-party penetration tests and bug bounty engagements, tracking findings through to closure.
Conduct structured threat modeling on new features, services, and architecture changes to proactively identify attack surfaces and prioritize testing and remediation.revised
Identify, assess, and mitigate emerging AI risks, with a specific focus on vulnerabilities related to cloud-based AI services and agent-based AI architectures.
Security Engineering & Infrastructure Hardening — supporting skillset, not the primary focus
Manage and secure cloud environments, using cloud firewalls and endpoint/CSPM platforms, informed by findings from testing and monitoring.
Deploy and maintain Zero Trust Architecture (ZTA).
Administer edge protections, including DDoS mitigation, WAF, and CDN configurations.
Integrate and manage security within the CI/CD pipeline, including DAST, SAST, and SCA.
Secure the software development lifecycle by integrating and managing scanning and repository tools.
Manage and secure containerized environments, ensuring safe image builds, dependency management, and secure deployments.
Secure user SaaS-based tools (Google Workspace, Atlassian, Slack), Mac-based MDM, and DNS/mail security.
Automation, Documentation & Leadership
Continually leverage generative AI, scripting, and Infrastructure as Code (IaC) across all tasks — from incident triage to exploit/test tooling to playbook creation to reduce manual toil and scale security operations.
Manage the development of security documents, such as incident playbooks and security operations procedures.
Develop and exercise attack/defense playbooks (tabletop exercises, purple-team drills), keeping all security operations documents up to date.
Lead and mentor junior personnel within the security team.
Skills & Experience Required
Strong written and verbal English communication skills, with a proven ability to break down intricate security risks and procedures for both technical and non-technical audiences.
Degree in information technology, computer science, cybersecurity, or a related field.
5+ years of experience in security analysis, penetration testing, incident response, or a related field — with demonstrated hands-on offensive security experience (internal pentesting, red-teaming, or vulnerability research).
Demonstrated, hands-on ability to identify and exploit common web application vulnerabilities (e.g., SQL injection, XSS) in a live setting comfort working directly against a target, not just running automated tools.revised
Proven ability to manually read and interpret raw log/SIEM data to spot sophisticated or obfuscated attacker activity, not solely alert-driven triage.revised
OSCP required or in progress (or equivalent demonstrated offensive security capability); CISSP, CISM, or GCIH also valued.
AWS Security Certification or equivalent experience.

Employment type
Full-Time

Work arrangement
No