Remote Vulnerability Analyst Jobs in Surrey, BC (NOW HIRING)

Job Type                            Regular Full-Time
Remote Type                     Hybrid
Location                            Vancouver, Canada
Posting Range                  $69,500 - $119,500
Number of positions        01  
Family is part of Definity, a Canadian multi-channel, property, and casualty insurance company whose success is founded on our family of companies’ long history of delivering a superior experience for those who count on us. We’re proud to help our customers, broker partners, employees, and communities adapt and thrive in a world of constant change. Our success in transforming into a digital leader in our industry is driven by a talented and engaged team with a passion for innovation and high performance.
To us, a seamless user experience is as important as the people behind it. That’s why we hire the most service-oriented individuals in BC and empower them with the tools they need to wow both our broker network and their clients. If a vibrant atmosphere with great people and an ambitious culture sounds like your kind of fit, apply to join us today.
Our ambition is to be one of Canada’s leading and most innovative P&C insurers. Come be a part of our journey, and love what you do.
Family offers a flexible, hybrid work experience where employees work from the office and virtually depending on the type of work they are doing and who they are working with. Bring your true self and be a part of our journey. It’s better here.
What can you expect in this role?
We’re looking for a Security Analyst who is passionate about cybersecurity and ready to make a real impact. In this role, you will play a key role in delivering the organization’s cybersecurity strategy by leading complex, cross-functional initiatives. You will apply expertise across governance, risk management, compliance, threat intelligence, and operational security to analyze risks, anticipate emerging threats, and strengthen enterprise security posture.
Working closely with teams across technology and business functions, you will support incident investigations, guide control design, and help embed security into systems, processes, and lifecycle workflows. Your contributions will enhance visibility, resilience, and overall security maturity across the organization.
What you’ll do?
Responsibilities

• Contribute to defining, refining, and implementing enterprise-wide security frameworks, standards, and methodologies across governance, risk assessment, compliance, and incident management
• Provide technical guidance across cybersecurity domains, supporting risk analysis, control design, regulatory alignment, and forward-looking security planning
• Partner with the cybersecurity team to advise security risks, business impacts, and recommended mitigation strategies to stakeholders, including senior leadership
• Drive cross-functional resolution of high-impact, multi-domain security challenges facilitating alignment across Technology, Risk, Compliance, Legal, Product, and Operations.
• Develop and maintain security reporting and metrics to improve visibility into risk trends, control effectiveness, and overall compliance posture
• Identify and support opportunities to enhance security processes, automation, tooling, and governance practices
• Work with and support Microsoft Azure and Microsoft 365 security environments
• Perform and support application security and vulnerability activities, including code scanning and use of security tools such as Qualys, CrowdStrike, Veracode, and Fortinet

What You Bring
Qualifications

• 3–4 years of experience in cybersecurity, including SOC operations, incident response, or security monitoring
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience)
• Industry certifications such as GICSP, CISSP, CISM, GCIP, Security+, Network+, or equivalent (preferred)

Skills and Experience

• Hands-on experience with security tools and technologies (e.g., SIEM, EDR, IDS/IPS, vulnerability scanners)
• Strong understanding of threat detection, investigation, and incident response frameworks
• Experience with application security, including code scanning and use of tools such as Qualys, CrowdStrike, Veracode, and Fortinet
• Knowledge of cloud security, particularly in Microsoft Azure and Microsoft 365 environments
• Familiarity with Identity and Access Management (IAM) solutions (e.g., Okta) and identity governance practices
• Experience with vulnerability, patch, access, and change management processes
• Ability to analyze complex security issues and clearly communicate risks to both technical and non-technical stakeholders
• Strong problem-solving skills with a proactive, solution-oriented approach

Nice to Have

• Experience building or improving security frameworks, processes, or governance models
• Exposure to threat intelligence programs and enterprise security reporting

Interested in this role, but don't meet every requirement? We encourage you to apply! We value diverse experiences and perspectives—great people bring value in many ways. If you believe you can excel in this role, tell us how. At Family, inclusion, diversity, and equity aren't just "nice to have" — they're essential to our success.
What's in it for you?

• Hybrid work schedule for most roles
• Company share ownership program
• Retirement savings program with company-matched RRSP contributions
• Generous time away, including vacation, personal leave, and birthday leave.
• Paid volunteer days and company matching on charitable donations.
• Competitive salary and benefits, including educational resources, tuition assistance, and paid time off to study for exams.
• Focus on inclusion with employee groups, access to BIPOC counsellors, and access to programs for working parents.
• Wellness and recognition programs
• Discounts on products and services

Actual salary for the role may vary depending on work location of the successful candidate and other factors including but not limited to, skills, education, experience, working conditions and the local labour market.  In addition to base pay, eligible employees may participate in various incentive plans which are paid out at the discretion of the company and subject to individual and company performance.
You must be legally entitled to work in Canada. Qualified candidates are asked to please submit a cover letter outlining their suitability for this opportunity and a copy of their resume in one document.
We would like to thank all candidates for showing interest in this role and our company; however, only those selected for further consideration will be contacted.
Our inclusive work environment welcomes diversity and supports accessibility. If you require accommodation at any time during the recruitment process, please let us know by contacting: accommodationrequest@familyins.com.