Director, Vulnerability Engineering

Socket.dev; Toronto; On-site; CAD 180,000 - 270,000; Full time

Job summary

RBC is seeking a Director of Vulnerability Engineering to lead both application and data engineering teams building a platform for end-to-end vulnerability management. You will partner with product to design capabilities, set the engineering roadmap for Exposure Management and reporting, and drive automation and AI integration.

You will manage a team in a regulated enterprise, shape security architecture, and influence stakeholders across the organization to adopt secure engineering practices.

Qualifications

• 6+ years of software engineering with progressive leadership responsibility.
• Experience leading application and data engineering teams in an enterprise environment.
• Experience designing and delivering platforms that support end-to-end operational workflows.
• Working familiarity with data modeling, graph databases, or knowledge graph architectures.
• Experience building and operationalizing automation at scale.

Responsibilities

• Oversees the execution of enterprise wide application security services, including secure design, testing, remediation, and training.
• Provides strategic leadership in implementing security frameworks, tools, and processes to address complex security challenges.
• Manages budgets and resource allocation to ensure operational efficiency and compliance.
• Cultivates stakeholder relationships to influence strategic decisions and promote secure practices.
• Leads cross functional collaboration efforts to drive business outcomes.
• Lead and develop the application and data engineering teams delivering the vulnerability management platform.

Skills

Application Security

Leadership

Security Engineering

Stakeholder Management

Data Engineering

Tools

Neo4j

Neptune

Job description

Job Description

What is the opportunity?

The Director of Vulnerability Engineering leads the application and data engineering teams responsible for building and operating the platform that enables application teams to manage vulnerabilities end-to-end. This platform will also serve as the home for Exposure Management and reporting. The team also supports internal automation, AI skills, and controls engineering. The role reports to the Sr. Principal, Vulnerability and Exposure Management.

This is a team full of initiative and momentum — we’re shipping a platform that will change how thousands of engineers interact with vulnerability data. You’ll have the rare opportunity to lead both application and data engineering in a space where AI, automation, and graph technologies are being applied to real security problems at enterprise scale. If you want to build products that matter, not just maintain systems, this is the role.

What will you do?

• Oversees the execution of enterprise wide application security services, including secure design, testing, remediation, and training, ensuring alignment with organizational standards and objectives.
• Provides strategic leadership in implementing security frameworks, tools, and processes to address complex security challenges and drive innovation.
• Manages budgets and resource allocation to ensure operational efficiency, compliance with policies and adherence to regulatory requirements.
• Cultivates stakeholder relationships to influence strategic decisions and promote the adoption of secure application practices across the organization.
• Manages application security initiatives of significant complexity, applying advanced technical expertise to solve abstract problems, and making independent decisions across business units.
• Makes independent decisions on program, technical or operational strategy for the department, providing leadership, coaching and mentorship through senior managers and managers. Sets strategic direction for the department or area receiving high level direction from senior leaders.
• Drives innovation across areas of responsibility identifying opportunities for making operational changes and practices, solving highly complex problems broadly related to application security.
• Leads cross functional collaboration efforts, fostering strong internal relationships across the organization and external relationships to drive business outcomes.
• Lead and develop the application and data engineering teams delivering the vulnerability management platform.
• Partner with product on the design of platform capabilities, then build and operationalize them to enable application teams to manage vulnerabilities end-to-end.
• Define and execute the engineering roadmap for Exposure Management and reporting capabilities within the platform
• Deliver internal automation and AI skills that accelerate vulnerability assessment, prioritization, and resolution
• Manage the engineering lifecycle for the automation of controls validation, ensuring controls are working as expected
• Partner across Technology and Operations to translate requirements into scalable engineering solutions
• Establish engineering standards, delivery practices, and technical governance across the team
• Attract, retain, and grow engineering talent across application development and data engineering disciplines.

What do you need to succeed?

Must Have

• 6+ years of experience in software engineering with progressive leadership responsibility
• Experience leading application and data engineering teams in an enterprise environment
• Experience designing and delivering platforms that support end-to-end operational workflows
• Working familiarity with data modeling, graph databases, or knowledge graph architectures
• Experience building and operationalizing automation at scale
• Ability to partner with product and translate business requirements into engineering delivery
• Effective stakeholder management skills across technical and non-technical audiences
• Experience working within regulated industries (financial services preferred)

Nice to have

• Understanding of vulnerability management, exposure management, or cybersecurity operations
• Experience with AI/ML integration, LLM-based tooling, or intelligent automation
• Familiarity with security control frameworks and control validation methodologies
• Experience with graph technologies such as Neo4j, Neptune, or similar
• Prior experience in a financial institution or similarly regulated enterprise
• Familiarity with agile delivery practices and engineering governance at scale

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world‑class training program in financial services
• Flexible work/life balance options
• Opportunities to do challenging work

Job Skills

Application Security, Collaboration, Computer Engineering, Cyber Security Management, Decision Making, Information Security Management, Information Technology Security, Infrastructure Penetration Testing, IT Security Architecture, IT Systems Integration, Leadership, Security Engineering, Security Information and Event Management (SIEM)

Additional Job Details

Address: 16 YORK ST:TORONTO

City: Toronto

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: TECHNOLOGY AND OPERATIONS

Job Type: Regular

Pay Type: Salaried

Posted Date: 2026-09-04

Application Deadline: 2026-09-30

Note

Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.