Vulnerability Lead

Infinity Solutions; Markham; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Infinity Solutions in Markham, Ontario is seeking a Vulnerability Lead to guide end-to-end vulnerability management across applications, infrastructure, cloud environments, databases and network assets. The role focuses on defining strategies, managing scanning activities, validating findings, and driving risk-based remediation to protect the organization.

You will oversee governance frameworks, coordinate with application, infrastructure, cloud teams and vendors, and report on remediation

Qualifications

• Experience with vulnerability management lifecycle and governance.
• Strong analytical and risk assessment skills.
• Ability to collaborate with multiple teams and vendors.

Responsibilities

• Lead end-to-end vulnerability management across applications, infrastructure, cloud, databases and network assets.
• Define and implement vulnerability management strategies, standards, and governance.
• Plan, schedule, and oversee vulnerability scanning using approved tools.
• Analyze findings, eliminate false positives, and assess business impact and risk.
• Prioritize remediation based on risk, asset criticality, and regulatory requirements.
• Coordinate remediation activities with owners, infrastructure, cloud teams, and third parties to meet SLA timelines.
• Track remediation progress and ensure timely closure of vulnerabilities.

Job description

About the Role and Job:

Job Title: Vulnerability Lead

Location: Markham, ON

Model: Hybrid (3 Days Onsite (Mon/ Tues/ Wed))

Job Type: Full time

Job Details:

• Lead and coordinate the end to end Vulnerability Management process across applications, infrastructure, cloud environments, databases, and network assets.
• Define, implement, and continuously improve vulnerability management strategies, processes, standards, and governance frameworks in alignment with organizational security policies.
• Plan, schedule, and oversee vulnerability scanning activities using approved security tools to identify security weaknesses and misconfigurations.
• Analyze vulnerability assessment results, validate findings, eliminate false positives, and determine business impact and risk severity.
• Prioritize vulnerabilities based on risk ratings, exploitability, asset criticality, regulatory requirements, and business impact.
• Collaborate with application owners, infrastructure teams, cloud teams, and third party vendors to drive remediation activities within defined SLA timelines.
• Track and report remediation progress, ensuring timely closure of identified vulnerabilities and security gaps.

Salary: