Senior Security Engineer, FISPAN
CA$130-160k
Offers semi-annual bonus plan
More information about location
1-3 days a week in office
ERP banking platform
Be an early applicant
ERP banking platform
101-200 employees
Be an early applicant
CA$130-160k
Offers semi-annual bonus plan
More information about location
1-3 days a week in office
101-200 employees
Company mission
FISPAN's mission is to help banks easily connect with their corporate clients.
Role
Who you are
- Degree in information technology, computer science, cybersecurity, or a related field
- 5+ years of experience in security analysis, incident response, or a related field
- AWS Security Certification or equivalent experience
- Relevant industry certifications, such as CISSP, CISM, GIAC Certified Incident Handler (GCIH), or Offensive Security Certified Professional (OSCP)
- In-depth knowledge of security principles, concepts, and best practices
- Strong understanding of network protocols, operating systems, and common vulnerabilities
- Proven experience applying Infrastructure as Code (IaC) principles and utilizing scripting/automation, along with modern AI assistants, to streamline daily security workflows and incident response
- Firm understanding of containerization and orchestration platforms (Kubernetes, Helm, Docker) along with robust image and dependency management practices
- Knowledge of security frameworks and standards, such as NIST, ISO 27001, and CIS Controls
- Familiarity with regulatory requirements, such as PCI DSS and GDPR
- Understanding of the threat landscape surrounding AI technologies, specifically evaluating and securing cloud and agent-based models
- Strong analytical and problem-solving skills, paired with excellent communication and collaboration abilities
- Specific Technology Stack Experience (Note: Experience with equivalent or similar tools is completely acceptable):
- Logging & SIEM: Splunk
- Cloud & Endpoint: CrowdStrike (Host and CSPM), AWS Security, Cloud Firewalls (AWS/Fortinet)
- Automation & IaC: Terraform, CloudFormation, Ansible, or similar automation frameworks and scripting languages (e.g., Python, Bash)
- Containers & Orchestration: Kubernetes, Helm, Docker, and dependency/image management tools
- Pipeline Security: CI/CD pipeline security (DAST/SAST/SCA), such as Sonarcloud, Snyk, GitHub, Quay, and Artifactory
- Network & Edge: Cloudflare/CloudFront (DDoS, WAF, CDN), ZScaler (ZTA)
- Vuln Management: TenableIO (Vulnerability and Configuration Management)
- SaaS & Email: Proofpoint (DNS/Mail), Google Workspace, Atlassian, Slack
- Device Management: Mac-based MDM systems like IRU or Kandji
What the job involves
- As a Senior Security Engineer, you will provide leadership, expertise, and advanced security analysis capabilities within our organization’s security operations
- Operating at a senior level, you will be deeply involved with the organization’s cyber security strategic plans and critical decision-making
- You will contribute to the continuous improvement of our security posture, from fine-tuning our SIEM and managing cloud firewalls to implementing Zero Trust Architecture, securing our CI/CD pipelines, and defending against emerging AI-driven threats
- You will champion an automation-first and AI-augmented mindset
- By continuously leveraging Infrastructure as Code (IaC) and AI tooling, you will scale, accelerate, and optimize our security operations across the board
- Embed Automation & AI Enhancement in Daily Workflows: Continually leverage generative AI, scripting, and Infrastructure as Code (IaC) across all tasks—from incident triage to playbook creation—to reduce manual toil, accelerate decision-making, and scale security operations
- Lead and oversee day-to-day security operations, utilizing AI-assisted analysis to ensure rapid and proper coordination of response with all parties of interest
- Ensure all incident tickets are assigned accordingly and resolved while establishing and complying with operations SLAs
- Improve alert signal-to-noise ratios and integrate external threat intel with security monitoring tools
- Regularly update and continuously improve threat detection use cases, utilizing AI tools to assist in rapid rule generation and threat modeling
- Ensure the efficient and effective function of all security tools across the organization
- Continuously fine-tune our SIEM to reduce false positives, leveraging advanced ML/AI capabilities where available to ensure pertinent data sources are onboarded and adequately parsed
- Identify, assess, and mitigate emerging AI risks, with a specific focus on vulnerabilities related to cloud-based AI services and agent-based AI architectures
- Manage and secure cloud environments, utilizing cloud firewalls and endpoint/CSPM platforms
- Deploy and maintain Zero Trust Architecture (ZTA)
- Administer edge protections, including DDoS mitigation, WAF, and CDN configurations
- Oversee enterprise-wide vulnerability and configuration management
- Secure user SaaS-based tools, including platforms like Google Workspace, Atlassian, and Slack
- Manage Mac-based laptop and mobile device management (MDM) platforms
- Maintain comprehensive DNS and mail security/monitoring
- Integrate and manage security within the CI/CD pipeline, including DAST, SAST, and SCA
- Secure the software development lifecycle by integrating and managing scanning and repository tools
- Manage and secure containerized environments, ensuring safe image builds, dependency management, and secure deployments
- Manage the development of security documents, such as incident playbooks and security operations procedures
- Develop and exercise playbooks for different types of attacks, keeping all security operations documents up to date
- Lead and mentor junior personnel within the security team
Our take
Small/medium-sized businesses (SMBs) have come under heightened operational pressure over recent years. It’s no help that this group has historically been radically underserved by legacy banks, but now the tide is turning: many banking institutions are doubling down on improving the quality and efficiency of their commercial banking solutions, and software company FISPAN is helping them get there.
FISPAN helps companies embed their commercial banking services into the existing ERP or accounting software used by their customers to run businesses. It’s a great way for banks to outsource the level of innovation required to keep up with commercial client demand - and, therefore, a great way of competing with the more agile neobanks, who are siphoning off legacy banking clients in substantial numbers.
FISPAN’s astute positioning has made its platform increasingly attractive for banks under pressure to keep up with the breakneck pace of change in fintech. It’s taking advantage of it too, with plans to expand to the lucrative European and Asian Pacific banking markets, and accelerated product development fuelled by 2025's Series B round of funding.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-31% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jun 2025
$30m
SERIES B
Sep 2023
$2m
SERIES A
Total funding: $70m
Company benefits
- 4-Week Vacation
- Health & Wellness Coverage
- 100% Parental Leave Top-Up
- Downtown Vancouver Offices & Amenities including fitness centre
- Daily Coffee Runs & Weekly Team Lunches
- MacBook / Apple equipment
Company HQ
Coal Harbour, Vancouver, BC
Leadership
Clayton Weir
(Co-Founder)Previously worked as a Senior Analyst and then Head of Growth at BC Tech. Underwent a Teaching Team entrepreneurship with the University of British Columbia, and spent over 5 years on the board of car-sharing co-operative Modo.
Lisa Shields
(Founder & CEO)Held senior software engineering roles at MacDonald Dettwiler and Environmental Criminology Research Inc., before moving on to found and serve as CEO/Director of gig economy global payments company Hyperwallet. They are a committee member for FinPay Canada, and on the Board of Directors for Thinkific.
Valery Novikov
(Co-Founder & CTO)Held a number of senior software roles at Netcracker Technology, before moving on to found NV Trading. Alongside work at FISPAN, they work as an Instructor at UBC Sauder School of Business.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 7 more jobs at FISPAN