Vulnerability Lead

TechDoQuest; Markham; On-site; CAD 90,000 - 120,000; Full time

Job summary

TechDoQuest is seeking a security professional to lead end-to-end Vulnerability Management across apps, infrastructure, cloud, databases, and network assets in Markham, Canada. You will define and implement strategies, plan scans with approved tools, analyze findings, and drive remediation with cross-functional teams.

The role requires prioritizing vulnerabilities by risk and impact, coordinating with owners and vendors, and providing progress updates to stakeholders, ensuring prompt closure of

Responsibilities

• Lead and coordinate the end to end Vulnerability Management process across applications, infrastructure, cloud environments, databases, and network assets.
• Define, implement, and continuously improve vulnerability management strategies, processes, standards, and governance frameworks in alignment with organizational security policies.
• Plan, schedule, and oversee vulnerability scanning activities using approved security tools to identify security weaknesses and misconfigurations.
• Analyze vulnerability assessment results, validate findings, eliminate false positives, and determine business impact and risk severity.
• Prioritize vulnerabilities based on risk ratings, exploitability, asset criticality, regulatory requirements, and business impact.
• Collaborate with application owners, infrastructure teams, cloud teams, and third party vendors to drive remediation activities within defined SLA timelines.
• Track and report remediation progress, ensuring timely closure of identified vulnerabilities and security gaps.

Job description

• Lead and coordinate the end to end Vulnerability Management process across applications, infrastructure, cloud environments, databases, and network assets.
• Define, implement, and continuously improve vulnerability management strategies, processes, standards, and governance frameworks in alignment with organizational security policies.
• Plan, schedule, and oversee vulnerability scanning activities using approved security tools to identify security weaknesses and misconfigurations.
• Analyze vulnerability assessment results, validate findings, eliminate false positives, and determine business impact and risk severity.
• Prioritize vulnerabilities based on risk ratings, exploitability, asset criticality, regulatory requirements, and business impact.
• Collaborate with application owners, infrastructure teams, cloud teams, and third party vendors to drive remediation activities within defined SLA timelines.
• Track and report remediation progress, ensuring timely closure of identified vulnerabilities and security gaps.