Remote Vulnerability Management Engineer - Cloud & CPE

Bilinguallink; New Glasgow; Remote; CAD 83,000 - 124,000; Part time

Job summary

AXON Networks is seeking a Security Specialist to establish and operate a risk-based vulnerability management program across cloud, Kubernetes, and network environments. You will validate findings, prioritize remediation, and coordinate fixes with teams to minimize exposure while maintaining service quality.

The role requires hands-on security engineering experience, deep CVE analysis skills, and the ability to communicate risk to technical and leadership audiences.

Qualifications

• 5+ years hands-on experience in vulnerability management, security engineering or cloud security.
• Experience with enterprise vulnerability platforms and cloud/container security.
• Ability to read code, package manifests, container images, configurations and logs.

Responsibilities

• Establish authoritative visibility into vulnerabilities across cloud, application, container, Kubernetes, network, endpoint, dependency, firmware and CPE assets.
• Prioritize remediation using technical severity, exposure, reachability and asset criticality.
• Create durable operating model for intake, validation, assignment, SLAs, exceptions, rescanning and reporting.
• Partner with Engineering, DevOps, NOC, Support, Product and Compliance to reduce exposure without impacting service.

Skills

Vulnerability management

Security engineering

Cloud security

Linux

Kubernetes

Python/Go scripting

CVSS analysis

Education

Bachelor’s degree in cybersecurity, computer science, engineering or equivalent practical experience

Tools

Tenable Nessus

Qualys

Rapid7

Wiz

Orca

Prisma Cloud

Snyk

Veracode

Checkmarx

Trivy

Grype

Nuclei

Job description

AXON Networks is seeking a Security Specialist to establish and operate a risk-based vulnerability management program across cloud, Kubernetes, and network environments. You will validate findings, prioritize remediation, and coordinate fixes with teams to minimize exposure while maintaining service quality.

The role requires hands-on security engineering experience, deep CVE analysis skills, and the ability to communicate risk to technical and leadership audiences.