Cybersecurity Vulnerability Engineer

Team: IT

Location: Canada

Commitment: Full-time

Workplace Type: remote

Accountabilities:

• Monitor and evaluate newly disclosed vulnerabilities and emerging threats from security intelligence sources, vulnerability databases, vendor advisories, and trusted research communities.
• Lead and coordinate vulnerability response activities for security issues that may impact enterprise systems, applications, cloud environments, and networks.
• Analyze vulnerabilities to understand affected components, exploitation requirements, attack vectors, required privileges, potential business impact, and available mitigation strategies.
• Review CVEs, technical advisories, security research publications, proof-of-concept information, and exploit intelligence to determine risk relevance.
• Assess enterprise exposure by validating whether vulnerable technologies, configurations, or services are present across environments.
• Partner with infrastructure, IT, application, cloud, product, and security teams to define remediation actions and establish ownership.
• Track vulnerability remediation activities through completion, ensuring risks are appropriately mitigated and deadlines are achieved.
• Escalate unresolved vulnerabilities, missed timelines, ownership challenges, and significant residual risks to relevant stakeholders.
• Maintain accurate status reporting and communicate vulnerability risks, progress, and remediation efforts to technical teams and leadership.
• Translate complex security findings into clear, actionable guidance for engineering, infrastructure, product, and business teams.
• Collaborate with incident response and threat detection teams when vulnerabilities require investigation for potential exploitation or additional monitoring.
• Support continuous improvement of vulnerability management processes, workflows, and security operations.

Requirements:

• Bachelor’s degree in computer information systems, computer science, engineering, programming, or a related technical field.
• 5+ years of cybersecurity experience, including 3–5 years focused on vulnerability management, vulnerability analysis, security engineering, incident response, threat intelligence, penetration testing, or related security functions.
• Strong experience analyzing CVEs and determining their relevance, exploitability, and business impact within complex enterprise environments.
• Solid understanding of vulnerability exploitation, attack paths, operating systems, networking, authentication mechanisms, privilege boundaries, and common security controls.
• Ability to interpret vendor advisories, security research, proof-of-concept material, logs, configurations, and vulnerability evidence.
• Working knowledge of Windows and Linux environments, network infrastructure, cloud technologies, virtualization, containers, and enterprise applications.
• Strong analytical and problem-solving skills with the ability to investigate complex security issues and recommend effective solutions.
• Ability to independently coordinate urgent cross-functional security activities involving multiple teams and competing priorities.
• Strong organizational skills with the ability to manage multiple vulnerability response initiatives from identification through resolution.
• Knowledge of information security practices across prevention, detection, and response domains.
• Experience supporting large, complex, or globally distributed enterprise environments is preferred.
• Experience using scripting and automation tools such as Python, PowerShell, APIs, SQL, or similar technologies to support vulnerability analysis and data correlation is an asset.
• Ability to obtain required security clearances and authorizations related to controlled technical information and regulated environments.

Benefits:

• Competitive total target compensation range of CAD 123,459 to CAD 172,842.60 annually, including base salary and variable compensation target.
• Comprehensive health and wellness benefits, including extended health, dental coverage, health spending account, life insurance, disability coverage, travel insurance, and employee assistance programs.
• Retirement savings plans with employer contributions and matching programs.
• Paid vacation days, holidays, and sick leave.
• Additional voluntary insurance options, including life, accident, critical illness, and long-term disability coverage.
• Employee discounts on services such as home, auto, and gym memberships.
• Fully remote work opportunity based in Canada.
• Opportunity to contribute to impactful cybersecurity programs protecting critical technology environments.
• Collaborative workplace culture focused on innovation, diversity, inclusion, and professional development.