Application Security Engineer

About the role

British Columbia Investment Management Corporation (BCI) is seeking an Application Security Engineer to embed within development teams and ensure the security of the software it builds, from design through deployment. The role sits at the intersection of software engineering and security, with a focus on AI‑assisted development and low‑code/no‑code environments.

Key responsibilities

• Define and enforce security requirements for all software solutions.
• Design, implement, and validate security controls throughout the software lifecycle.
• Collaborate with business and technology teams in an Agile hybrid environment to deliver secure, high‑quality products.
• Secure cloud environments, specifically Microsoft Azure, and integrate security into CI/CD pipelines.
• Monitor emerging trends in AI‑enabled development and low‑code/no‑code platforms, assessing their security implications.

Required profile

• Bachelor’s degree in Technology, Engineering, Computer Science, or a related field.
• Minimum 5 years of progressively senior experience in information security, with a focus on application security.
• Strong knowledge of engineering secure systems and cloud security (Microsoft Azure).
• Excellent documentation and customer‑service skills.

Required skills

• Microsoft Azure
• Application security practices
• AI‑assisted development
• Low‑code/no‑code platforms