Sr. Engineer - Vulnerability Management CA Flexible Location

OnX; Canada; Hybrid; CAD 70,000 - 100,000; Full time

Benefits offered by this job

Security certifications

Public sector experience

IR playbook authoring

Job summary

OnX is seeking a Security Operations Analyst to triage security events from our MDR platform and determine severity with context. You will coordinate responses to critical incidents and enrich findings using CVSS, KEV, and EPSS data.

A proactive approach will help drive remediation prioritization and asset criticality designations. You will contribute to incident response playbooks and participate in weekly/monthly reporting.

Qualifications

• Experience as SOC or vulnerability management analyst.
• Familiar with MDR/SIEM alert triage.
• Knowledge of CVSS, KEV, EPSS for prioritization.
• Experience with ITSM ticketing systems.
• Willing to participate in rotating on-call schedule.
• Eligible for Canadian security clearance; Canadian residency.

Responsibilities

• Triage security events from MDR platform and reclassify severity.
• Coordinate response for critical incidents.
• Enrich vulnerability findings with CVSS, KEV, and EPSS data.
• Build and maintain a prioritized remediation queue.
• Assist in asset criticality designation.
• Develop and maintain incident response playbooks.
• Prepare weekly and monthly security reports.

Skills

MDR/SIEM triage

Vulnerability prioritization

ITSM ticketing

On-call rotation

Canadian security clearance eligible

Canadian residency

Job description

Responsibilities

Triage security events from our MDR platform, validate and reclassify severity based on operational context, coordinate response for critical incidents, enrich vulnerability findings using CVSS, CISA KEV, and EPSS data, build and maintain a prioritized remediation queue, help drive asset criticality designation, develop and maintain incident response playbooks, and participate in weekly and monthly reporting.

Qualifications

SOC or vulnerability management analyst experience, familiarity with MDR/SIEM alert triage, understanding of vulnerability prioritization frameworks (CVSS/KEV/EPSS), ITSM ticketing experience, comfort with a rotating on-call schedule, eligibility for Canadian security clearance, Canadian residency.

Nice to Have

• Security+, CySA+, GCIH, or similar certifications; prior experience supporting a public sector, law enforcement, or financial services client; incident response playbook authoring experience.

Work Environment

Primarily remote, based in Canada, with availability aligned to Eastern time for on-call coverage. Minimal to no on-site work expected.

Interview Process

Recruiter conversation, hiring manager conversation, technical panel (triage and prioritization scenario), clearance/residency confirmation, offer.