Posted 11 days ago
IT Advisor - Cloud and Application Security Advisor
@ BC Hydro
Vancouver, British Columbia
Overview
BC Hydro is hiring an IT Advisor for cloud and application security in Vancouver, a permanent full-time role paying $109,700 to $138,700 annually. The work covers application security across design to deployment, secure code review, SAST, DAST and SCA testing, and GitHub Advanced Security administration. The posting requires seven years of application and cloud security experience and offers a lifetime pension and at least 15 paid vacation days.
Responsibilities:
- Establish application security practices from design to deployment
- Perform secure code reviews and SAST, DAST and SCA testing
- Administer GitHub Enterprise security tooling
- Review Infrastructure as Code and deployment pipelines
- Mentor team members and contract resources
Requirements summary:
- Degree in computer science or IT, or equivalent experience
- Seven years of application and cloud security experience
- Hands-on GitHub Advanced Security and CodeQL experience
- Experience with AWS, Azure or Google Cloud
- Strong code review skills in C#/.NET or JavaScript/Node.js
Tools & skills
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-11-02
- First seen by our source
- 2026-11-14
- Source record updated
- 2026-11-14
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | IT |
| Experience | 7+ years |
| Hours per week | 37.5 |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Education | Bachelor’s degree (preferred) |
| Fields of study | Computer Science, Information Technology |
| Perks mentioned | Generous paid time off, Flexible hours, Retirement plan, Paid training |
Summary and details written by AI from the posting; the employer’s posting is the authority.
BC Hydro
| Field | Value |
|---|---|
| Open jobs on Jobsy | 22 |
Job Location: Vancouver
Employment type: Permanent
Hours of work: Full-time (37.5 hrs/wk)
Annual Salary: $ 109,700.00 - 138,700.00
No. of positions: 1
Closing date: November 24, 2026
About the job:
What you’ll do
• Work with stakeholders to establish a set of security practices that cover all aspects of application development, from design to deployment, to create a robust application security program.
• Formulate and advocate for security policies and standards related to applications, databases, and cloud infrastructure.
• Contribute to business cases, tool evaluations, and application security guidelines that support the cybersecurity roadmap.
• Work with stakeholders to establish automated security verification and testing practices for applications.
• Perform hands-on secure code reviews and application security testing, including SAST, DAST, and SCA, to identify vulnerabilities before applications are migrated or released to production.
• Administer and optimize application security tooling within GitHub Enterprise, including GitHub Advanced Security (GHAS), CodeQL, and GitHub Actions policies.
• Identify and mitigate software supply chain risks related to third-party actions, open-source packages, and developer tools and extensions.
• Identify application security requirements by using threat modeling and an understanding of the compliance and regulatory landscape.
• Work with stakeholders to apply application security principles across cloud-native application development to support secure cloud deployments.
• Review Infrastructure as Code (IaC) templates and deployment pipelines to ensure secure configurations, approval gates, and proper separation of production and non-production environments.
• Support architecture in the establishment of application and cloud security posture management and workload protection solutions.
• Collaborate with Cybersecurity Operations and Infrastructure teams to validate detection and response capabilities for cloud applications, including web application firewall (WAF) policies and purple team exercises.
• Support application security champion initiatives to reinforce security principles to improve security culture.
• Provide technical guidance and mentorship to team members and contract resources.
What you bring
• University or College degree in Computer Science, Information Technology or related field, or a combination of education and experience may be considered.
• A minimum of 7 years of dedicated experience in application and cloud security.
• Experience replacing legacy, on-premises applications with cloud-based applications, with a focus on secure migration pathways, on-demand computing, and scalability.
• A background in software development with a strong grasp of cloud platforms like AWS, Azure, or Google Cloud.
• Experience reviewing code in languages and frameworks such as C#/.NET and JavaScript/Node.js.
• Hands-on experience with GitHub Enterprise and GitHub Advanced Security, including CodeQL and secure GitHub Actions workflows.
• Hands-on experience with static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and manual penetration testing using tools such as Burp Suite or ZAP.
• Proven ability to work with external system integrators, vendors, and managed service providers to deliver secure outcomes.
• An analytical mindset with meticulous problem-solving skills.
• Outstanding communication abilities, both in writing and speaking.
• Preferred certifications include GIAC Cloud Security Automation (GCSA), GIAC Cloud Security Essentials Certification (GCLD), GIAC Public Cloud Security (GPCS), Microsoft Certified: DevOps Engineer Expert (AZ-400), Microsoft Certified: Azure Security Engineer Associate (AZ-500), GitHub Advanced Security (GH-500).
What we offer
• A comprehensive benefits package - A minimum of 15 paid vacation days - A lifetime pension - Flexible work model, depending on your role type - Training and development courses For more information on the benefits we offer, visit bchydro.com/benefits.
For more information on the benefits we offer, visit bchydro.com/benefits.
What else you should know
• Don't forget to update your Candidate Profile with your current resume and copies of your certifications. If applicable, include your Trades Qualification. This will ensure we have all the necessary information to assess your application without any delays. Location: Vancouver, British Columbia, Canada, V6B 5R3. PM# 2010395
Date Posted: 2026-11-03 Closing Date: 2026-11-24 For internal use: 52549594
How to apply
Interested candidates should submit their applications online at https://app.bchydro.com/careers/current_opp.html or click 'Apply'
You must use a supported browser, such as Firefox, Internet Explorer, Google Chrome or Safari. Your pop up blocker will also need to be disabled for the BC Hydro Careers site.
On the BC Hydro Careers site, click on the Apply button in order to complete the steps to apply for this job. Please be sure to update your Candidate Profile with your current resume and include copies of your certifications, if applicable.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.