Cybersecurity Vulnerability Engineer

Accountabilities:
Monitor and evaluate newly disclosed vulnerabilities and emerging threats from security intelligence sources, vulnerability databases, vendor advisories, and trusted research communities. Lead and coordinate vulnerability response activities for security issues that may impact enterprise systems, applications, cloud environments, and networks. Analyze vulnerabilities to understand affected components, exploitation requirements, attack vectors, required privileges, potential business impact, and available mitigation strategies. Review CVEs, technical advisories, security research publications, proof-of-concept information, and exploit intelligence to determine risk relevance. Assess enterprise exposure by validating whether vulnerable technologies, configurations, or services are present across environments. Partner with infrastructure, IT, application, cloud, product, and security teams to define remediation actions and establish ownership. Track vulnerability remediation activities through completion, ensuring risks are appropriately mitigated and deadlines are achieved. Escalate unresolved vulnerabilities, missed timelines, ownership challenges, and significant residual risks to relevant stakeholders. Maintain accurate status reporting and communicate vulnerability risks, progress, and remediation efforts to technical teams and leadership. Translate complex security findings into clear, actionable guidance for engineering, infrastructure, product, and business teams. Collaborate with incident response and threat detection teams when vulnerabilities require investigation for potential exploitation or additional monitoring. Support continuous improvement of vulnerability management processes, workflows, and security operations. Requirements: Bachelor’s degree in computer information systems, computer science, engineering, programming, or a related technical field. 5+ years of cybersecurity experience, including 3–5 years focused on vulnerability management, vulnerability analysis, security engineering, incident response, threat intelligence, penetration testing, or related security functions. Strong experience analyzing CVEs and determining their relevance, exploitability, and business impact within complex enterprise environments. Solid understanding of vulnerability exploitation, attack paths, operating systems, networking, authentication mechanisms, privilege boundaries, and common security controls. Ability to interpret vendor advisories, security research, proof-of-concept material, logs, configurations, and vulnerability evidence. Working knowledge of Windows and Linux environments, network infrastructure, cloud technologies, virtualization, containers, and enterprise applications. Strong analytical and problem-solving skills with the ability to investigate complex security issues and recommend effective solutions. Ability to independently coordinate urgent cross-functional security activities involving multiple teams and competing priorities. Strong organizational skills with the ability to manage multiple vulnerability response initiatives from identification through resolution. Knowledge of information security practices across prevention, detection, and response domains. Experience supporting large, complex, or globally distributed enterprise environments is preferred. Experience using scripting and automation tools such as Python, PowerShell, APIs, SQL, or similar technologies to support vulnerability analysis and data correlation is an asset. Ability to obtain required security clearances and authorizations related to controlled technical information and regulated environments. Benefits: Competitive total target compensation range of CAD 123,459 to CAD 172,842.60 annually, including base salary and variable compensation target. Comprehensive health and wellness benefits, including extended health, dental coverage, health spending account, life insurance, disability coverage, travel insurance, and employee assistance programs. Retirement savings plans with employer contributions and matching programs. Paid vacation days, holidays, and sick leave. Additional voluntary insurance options, including life, accident, critical illness, and long-term disability coverage. Employee discounts on services such as home, auto, and gym memberships. Fully remote work opportunity based in Canada. Opportunity to contribute to impactful cybersecurity programs protecting critical technology environments. Collaborative workplace culture focused on innovation, diversity, inclusion, and professional development.

How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
 Why Apply Through Jobgether? 
 
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
 
 
#LI-CL1