Sr. Engineer - Vulnerability Management

CBTS; Canada; Hybrid; CAD 72,000 - 92,000; Full time

Benefits offered by this job

Professional development support

Competitive benefits package

Flexible work options

Job summary

OnX, a leading Canadian technology solutions provider, seeks a Sr. Engineer - Vulnerability Management to lead vulnerability lifecycle, automate remediation, and strengthen security posture across on-premises, cloud, and hybrid environments.

Responsibilities include managing assessments, tooling, and risk-based prioritization while partnering with Infrastructure, Cloud, Platform Eng, DevSecOps, SOC, and Applications teams to meet remediation SLAs.

Qualifications

• Bachelor's degree in computing/engineering or related field.
• 6-8 years IT/security experience.
• 5+ years hands-on Vulnerability Management and Security Operations.
• Strong understanding of enterprise infrastructure, cloud security, DevSecOps, and remediation.

Responsibilities

• Manage end-to-end vulnerability management lifecycle from identification to remediation reporting.
• Perform vulnerability assessments across OS, apps, cloud, containers, and networks.
• Operate and optimize vulnerability scanning tools and assessment frameworks.
• Drive automation using Python and PowerShell to improve remediation workflows.
• Analyze threat intelligence, CVSS, and emerging vulnerabilities for risk-based prioritization.
• Collaborate with Infra, Cloud, Platform Eng, DevSecOps, SOC, and App teams to meet SLAs.
• Support security incidents by evaluating vulnerability impact and root cause analysis.
• Manage vulnerability exceptions, false positives, and risk acceptance processes.
• Create executive dashboards showing exposure trends and progress.

Skills

Linux Administration

Windows Administration

Vulnerability Assessment & Management

Security Automation

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, Telecommunications, or a related technical field

Tools

Qualys VMDR

Microsoft Defender Vulnerability Management

Nessus

Rapid7

Python Scripting

PowerShell Scripting

Job description

OnX is a leading Canadian technology solutions provider helping organizations modernize, secure, and optimize their IT environments. We partner with clients across industries to deliver innovative infrastructure, cloud, security, and managed services solutions that drive business success. We are seeking a highly skilled Sr. Engineer - Vulnerability Management to join our growing Cybersecurity team. In this role, you will be responsible for identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across enterprise infrastructure, applications, cloud environments, and networks. You will play a critical role in strengthening the organization's security posture by leading vulnerability lifecycle management, automating remediation processes, and partnering across infrastructure, cloud, platform engineering, and application teams.

What You'll Do

• Manage the end-to-end vulnerability management lifecycle, including identification, assessment, prioritization, remediation validation, and reporting.
• Perform vulnerability assessments across operating systems, applications, cloud platforms, containers, and network environments.
• Operate and optimize vulnerability scanning tools and security assessment frameworks.
• Drive automation initiatives using Python and PowerShell to improve remediation workflows and reporting.
• Analyze threat intelligence, exploit data, CVSS scores, and emerging vulnerabilities to support risk-based prioritization.
• Collaborate with Infrastructure, Cloud, Platform Engineering, DevSecOps, SOC, and Application teams to ensure remediation SLAs are achieved.
• Support security incidents by evaluating vulnerability impact, exploitability, and contributing to root cause analysis.
• Manage vulnerability exceptions, false-positive handling, and risk acceptance processes.
• Create executive-level reports and dashboards highlighting exposure trends and remediation progress.

Required Skills & Experience

• Qualys VMDR
• Microsoft Defender Vulnerability Management
• Nessus
• Rapid7
• Linux Administration
• Windows Administration
• Python Scripting
• PowerShell Scripting
• Vulnerability Assessment & Management
• Security Automation

Cybersecurity Expertise

• Cloud Security
• Application Security
• Network & Endpoint Security
• Security Operations
• Threat Detection & Incident Response
• Identity & Access Management (IAM)
• Data Protection & Encryption
• Vulnerability Remediation Programs
• Risk-Based Vulnerability Prioritization

Preferred Certifications

• Certified Ethical Hacker (CEH)
• Additional cybersecurity certifications such as Security+, CISSP, GIAC, or cloud security certifications are a plus.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, Telecommunications, or a related technical field.
• 6-8 years of overall IT/Security experience.
• Minimum 5+ years of hands-on experience in Vulnerability Management and Security Operations.
• Strong understanding of enterprise infrastructure, cloud security, DevSecOps, and remediation practices.

What Makes You Successful

• Strong analytical and problem-solving skills.
• Excellent collaboration and communication abilities.
• Ownership mindset with strong attention to detail.
• Ability to work cross-functionally with technical and business stakeholders.
• Passion for cybersecurity, automation, and continuous improvement.

Why Join OnX?

• Work with modern infrastructure and cloud technologies.
• Collaborate with experienced technology professionals across Canada.
• Gain exposure to enterprise-scale environments and strategic initiatives.
• Competitive compensation and benefits package.
• Professional development and certification support.
• Flexible work options depending on role requirements.

$72,000 - $92,000 base salary (not including bonus or commission)

The compensation range in this posting reflects the Company's good-faith estimate at the time of publication. The applicable base pay range for any individual will be determined based on the candidate's designated primary work location as well as factors including role scope and responsibilities, required qualifications, and the individual's experience, education, skills, knowledge, and performance. Certain positions may also be eligible for additional compensation such as discretionary merit increases, bonuses, or sales-based variable compensation in accordance with applicable plans and role requirements.

Diversity & Inclusion

OnX is an equal opportunity employer committed to creating an inclusive environment for all employees. We celebrate diversity and are dedicated to fostering a workplace where everyone can thrive regardless of race, religion, gender, age, disability, sexual orientation, or any other protected characteristic.