Vulnerability Management Security Engineer - Cloud Network

Socket.dev; Toronto; Remote; CAD 83,000 - 124,000; Full time

Job summary

AXON Networks seeks a Security Specialist, Vulnerability Management to build a risk-based program across cloud, apps, Kubernetes, network and CPE assets. You will distinguish real findings, validate CVEs, and communicate risk to engineering leadership for timely remediation.

You will select scans, correlate results, coordinate patches and build dashboards, playbooks and governance artifacts to sustain a repeatable, auditable vulnerability workflow.

Qualifications

• 5+ years in vulnerability management or security engineering.
• Strong CVE analysis and risk-based prioritization.
• Experience with enterprise scanners and cloud/Kubernetes security.
• Hands-on Linux, networking and scripting skills.

Responsibilities

• Establish authoritative visibility into vulnerabilities across cloud, apps, containers, Kubernetes, network, endpoints and CPE assets.
• Determine CVE applicability to versions, configurations and exposure in the environment.
• Prioritize remediation using severity, exploitability, asset criticality and controls.
• Create remediation records with owners, due dates and validation criteria.
• Build dashboards, playbooks and reports for risk trends and governance.

Skills

Vulnerability management

CVE analysis

Cloud security

Kubernetes

Linux

Networking TCP/IP DNS TLS/PKI

Scripting (Python Go PowerShell Bash)

Education

Bachelor's degree in cybersecurity or CS or engineering

Tools

Tenable

Nessus

Qualys

Rapid7

Snyk

Veracode

Checkmarx

Trivy

Grype

Nuclei

Job description

AXON Networks seeks a Security Specialist, Vulnerability Management to build a risk-based program across cloud, apps, Kubernetes, network and CPE assets. You will distinguish real findings, validate CVEs, and communicate risk to engineering leadership for timely remediation.

You will select scans, correlate results, coordinate patches and build dashboards, playbooks and governance artifacts to sustain a repeatable, auditable vulnerability workflow.