Security Specialist, Vulnerability Management

📋 Description

• Establish comprehensive visibility across cloud, application, container, Kubernetes, network
• Design, configure, and maintain authenticated and unauthenticated vulnerability scans, agent-based
• Evaluate and administer vulnerability-management and security-testing platforms, integrating
• Define safe scanning procedures, credentials, rate limits, exclusions, maintenance windows, and
• Review and validate vulnerability findings, distinguishing true positives, false positives
• Analyze CVEs using affected versions, configurations, package provenance, firmware/software

🎯 Requirements

• 5+ years of hands-on experience in vulnerability management, vulnerability assessment, security
• Demonstrated experience owning enterprise vulnerability management workflows, including scanner
• Strong CVE analysis capabilities to assess applicability and exploitability
• Experience with enterprise vulnerability platforms and complementary scanning tools
• Working knowledge of CVE/CWE, NVD, CVSS, CISA KEV, EPSS, vendor advisories, SBOMs, and risk-based
• Hands-on Linux, TCP/IP, DNS, TLS/PKI, identity and access controls, APIs, cloud infrastructure

🎁 Benefits

• Hourly contract rate: CAD $60-$90 per hour
• Fully remote role across Canada
• Opportunity to work on complex security environments including cloud, apps, Kubernetes, networking
• High-impact role with ownership of a company-wide program
• Cross-functional collaboration with engineering, DevOps, operations, product, support, and
• Modern security technologies and platforms