Director, Vulnerability Engineering

RBC; Toronto; On-site; CAD 180,000 - 240,000; Full time

Benefits offered by this job

Total rewards program

Flexible benefits

Career growth opportunities

Job summary

RBC in Toronto seeks a Director of Vulnerability Engineering to lead both application and data engineering teams building a platform for end-to-end vulnerability management. You will drive architecture, automation, AI-enabled capabilities, and governance across security and risk areas.

You will lead a diverse team delivering enterprise-grade solutions, partner with product, and shape the roadmap for Exposure Management and reporting, reporting to senior leadership.

Qualifications

• Senior leadership experience in software/data engineering for enterprise platforms.
• Experience leading application and data engineering teams in a large organization.
• Proven ability to design and deliver end-to-end platforms supporting operational workflows.
• Familiarity with data modeling, graph databases, or knowledge graph architectures.
• Experience building and operating automation at scale.
• Ability to translate business requirements into engineering delivery.
• Strong stakeholder management across technical and non-technical audiences.
• Experience in regulated industries (financial services preferred).

Responsibilities

• Oversee enterprise-wide application security services, including design, testing, remediation, and training.
• Lead security frameworks, tools, and processes to address complex challenges.
• Manage budgets and resource allocation for efficiency and compliance.
• Foster stakeholder relationships to promote secure practices across the organization.
• Guide high-complexity security initiatives across business units.
• Provide leadership and mentorship to senior managers and teams.
• Drive innovation and scalable engineering solutions across platforms.
• Partner with product to design capabilities and operationalize them.

Skills

Leadership

Application security

Data engineering

Stakeholder management

Platform design & delivery

Automation at scale

Product requirement translation

Graph databases/knowledge graphs

Cross-functional collaboration

Security governance

Tools

Neo4j

Neptune

Job description

What is the opportunity?

The Director of Vulnerability Engineering leads the application and data engineering teams responsible for building and operating the platform that enables application teams to manage vulnerabilities end-to-end. This platform will also serve as the home for Exposure Management and reporting. The team also supports internal automation, AI skills, and controls engineering. The role reports to the Sr. Principal, Vulnerability and Exposure Management.

Job Description

What is the opportunity?

The Director of Vulnerability Engineering leads the application and data engineering teams responsible for building and operating the platform that enables application teams to manage vulnerabilities end-to-end. This platform will also serve as the home for Exposure Management and reporting. The team also supports internal automation, AI skills, and controls engineering. The role reports to the Sr. Principal, Vulnerability and Exposure Management.

This is a team full of initiative and momentum we’re shipping a platform that will change how thousands of engineers interact with vulnerability data. You’ll have the rare opportunity to lead both application and data engineering in a space where AI, automation, and graph technologies are being applied to real security problems at enterprise scale. If you want to build products that matter, not just maintain systems, this is the role.

• Oversees the execution of enterprise wide application security services, including secure design, testing, remediation, and training, ensuring alignment with organizational standards and objectives.
• Provides strategic leadership in implementing security frameworks, tools, and processes to address complex security challenges and drive innovation.
• Manages budgets and resource allocation to ensure operational efficiency, compliance with policies and adherence to regulatory requirements.
• Cultivates stakeholder relationships to influence strategic decisions and promote the adoption of secure application practices across the organization.
• Manages application security initiatives of significant complexity, applying advanced technical expertise to solve abstract problems, and making independent decisions across business units.
• Makes independent decisions on program, technical or operational strategy for the department, providing leadership, coaching and mentorship through senior managers and managers. Sets strategic direction for the department or area receiving high level direction from senior leaders.
• Drives innovation across areas of responsibility identifying opportunities for making operational changes and practices, solving highly complex problems broadly related to application security.
• Leads cross functional collaboration efforts, fostering strong internal relationships across the organization and external relationships to drive business outcomes.
• Lead and Develop Talent: Lead and develop the application and data engineering teams delivering the vulnerability management platform.
• Design and Deliver: Partner with product on the design of platform capabilities, then build and operationalize them to enable application teams to manage vulnerabilities end-to-end.
• Exposure Management: Define and execute the engineering roadmap for Exposure Management and reporting capabilities within the platform
• Automation and AI: Deliver internal automation and AI skills that accelerate vulnerability assessment, prioritization, and resolution
• Controls Validation: Manage the engineering lifecycle for the automation of controls validation, ensuring controls are working as expected
• Cross-functional Partnership: Partner across Technology and Operations to translate requirements into scalable engineering solutions
• Engineering Standards: Establish engineering standards, delivery practices, and technical governance across the team
• Talent Growth: Attract, retain, and grow engineering talent across application development and data engineering disciplines.

What do you need to succeed?

Must Have

• 6+ years of experience in software engineering with progressive leadership responsibility
• Experience leading application and data engineering teams in an enterprise environment
• Experience designing and delivering platforms that support end-to-end operational workflows
• Working familiarity with data modeling, graph databases, or knowledge graph architectures
• Experience building and operationalizing automation at scale
• Ability to partner with product and translate business requirements into engineering delivery
• Effective stakeholder management skills across technical and non-technical audiences
• Experience working within regulated industries (financial services preferred)

Nice to have

• Understanding of vulnerability management, exposure management, or cybersecurity operations
• Experience with AI/ML integration, LLM-based tooling, or intelligent automation
• Familiarity with security control frameworks and control validation methodologies
• Experience with graph technologies such as Neo4j, Neptune, or similar
• Prior experience in a financial institution or similarly regulated enterprise
• Familiarity with agile delivery practices and engineering governance at scale

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world-class training program in financial services
• Flexible work/life balance options
• Opportunities to do challenging work

#TECHPJ

Job Skills

Application Security, Collaboration, Computer Engineering, Cyber Security Management, Decision Making, Information Security Management, Information Technology Security, Infrastructure Penetration Testing, IT Security Architecture, IT Systems Integration, Leadership, Security Engineering, Security Information and Event Management (SIEM)

Additional Job Details

Address: 16 YORK ST:TORONTO

City: Toronto

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: TECHNOLOGY AND OPERATIONS

Job Type: Regular

Pay Type: Salaried

Posted Date: 2026-09-04

Application Deadline: 2026-09-30

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.