Vulnerability Management Security Engineer

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Montreal (administrative region); Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking a Vulnerability Management Security Engineer in Montreal with 2–4 years of experience to manage the end-to-end vulnerability lifecycle across enterprise environments. The role is hybrid, requiring three days onsite.

You will conduct scans, analyze findings, and coordinate remediation with Infrastructure, Cloud, and DevOps teams, while tracking SLAs and security policies to strengthen resilience against threats.

Qualifications

• Strong background in cybersecurity with hands-on vulnerability management experience.
• Experience performing vulnerability discovery, assessment, remediation, and reporting.

Responsibilities

• Manage vulnerability lifecycle end-to-end across enterprise environments.
• Conduct scans across servers, endpoints, applications, databases, networks, and cloud.
• Analyze findings using CVSS, threat intel, exploitability, and business impact.
• Collaborate with Infrastructure, Applications, Cloud, and DevOps teams for remediation.
• Track remediation progress against SLAs and security policies.
• Develop vulnerability dashboards, KPIs, and reports for stakeholders.
• Support penetration testing, audits, compliance and threat assessments.

Skills

Cybersecurity

Vulnerability Management

Vulnerability Assessment

CVSS

Risk Prioritization

Remediation Tracking

Job description

Job Title: Vulnerability Management Security Engineer

Location: Montreal, QC – Hybrid (3 days onsite)
Experience: 2–4 Years
Interview: Face-to-Face Required

Role Overview: Seeking a Security Engineer with strong Vulnerability Management experience to manage the end-to-end vulnerability lifecycle across enterprise environments.

Key Responsibilities

• Manage vulnerability discovery, assessment, prioritization, remediation, and reporting.
• Conduct vulnerability scans across servers, endpoints, applications, databases, network, and cloud environments.
• Analyze findings and prioritize risks using CVSS, threat intelligence, exploitability, and business impact.
• Collaborate with Infrastructure, Application, Cloud, and DevOps teams for remediation.
• Track remediation against SLAs and security policies.
• Develop vulnerability dashboards, KPIs, and reports.
• Support penetration testing, audits, compliance, and emerging threat assessments.

Must- Have Skills

Cybersecurity | Vulnerability Management | Vulnerability Assessment | CVSS | Risk Prioritization | Remediation Tracking