Bilingual Specialist, Enterprise Vulnerability Management

Job Description

Procom is currently looking for a Specialist, Enterprise Vulnerability Management for our client in the public sector

THIS IS A PERMANENT ROLE WITH A CROWN CORPORATION
LOCATION: HYBRID (3 DAYS PER WEEK IN OFFICE, OPTION OF LOCATION IN THE OTTAWA, OR MONTREAL AREA)
CLEARANCE: SECRET (MUST BE ELIGIBLE)
LANGUAGE: INTERMEDIATE BILINGUAL (ENG/FRE)
REFERENCES: 2

RESUMES DUE: ASAP

Required Qualifications
 

• An undergraduate degree in Information Technology, Cybersecurity, Computer Science, Software Engineering, Computer Engineering, or a related field, or equivalent experience
• A minimum of 5 years of experience in information security, vulnerability management, application security, infrastructure security, DevSecOps, or a related discipline
• A security certification completed or in progress, such as Security+, CEH, CSSLP, ISC2 CC, GWAPT, or equivalent, with practical experience supporting cybersecurity and vulnerability management activities
• Hands on experience using vulnerability scanning, application security testing, and remediation management tools
• Strong understanding of the full vulnerability management lifecycle, from identification through validation
• Knowledge of infrastructure security, cloud security, application security, OWASP Top 10 risks, and common cybersecurity threats and controls
• Familiarity with Secure Software Development Lifecycle practices and Agile, DevOps, and DevSecOps delivery frameworks
• Strong analytical, communication, documentation, stakeholder engagement, risk assessment, and issue escalation skills

***IF YOU ARE INTERESTED IN THIS POSITION, PLEASE SEND AN UPDATED RESUME IN WORD FORMAT WITH THE DETAILED INFORMATON THAT IS LISTED UNDER THE EXPERIENCE AND LIST THE PROESSIONAL AND TECHNICAL SKILLS THAT YOU HAVE WORKED WITH***

STATEMENT OF WORK

Specialist, Enterprise Vulnerability Management
Procom is recruiting on behalf of a well established Canadian organization for a Specialist, Enterprise Vulnerability Management. This is a chance to take ownership of a mature vulnerability management program and help a security team stay ahead of emerging risk across infrastructure, applications, cloud, APIs, and modern software delivery platforms.

In this role, you will apply established vulnerability management standards, application security practices, risk methodologies, and threat intelligence to determine remediation priorities and drive control actions within defined frameworks. You will be accountable for the operational execution and data integrity of the vulnerability management program, ensuring vulnerabilities are identified, assessed, prioritized, tracked, communicated, remediated, and escalated on schedule.

Responsibilities
 

• Identify, analyze, and assess vulnerabilities across infrastructure, cloud environments, applications, APIs, containers, and related technologies using security scanning and testing tools
• Validate findings through risk assessment, eliminating false positives and determining exploitability, business impact, and overall risk
• Classify, prioritize, and maintain accurate vulnerability records using approved risk rating methodologies, threat intelligence, OWASP guidance, supporting evidence, and remediation tracking
• Coordinate remediation with infrastructure, development, architecture, cloud, and technology teams, providing guidance on security controls, secure coding practices, and treatment options
• Monitor remediation progress, validate fixes, drive follow up actions, and escalate overdue, high risk, or unresolved vulnerabilities through to closure or formal risk acceptance
• Support the integration of vulnerability management practices into Agile, DevOps, and DevSecOps workflows while maintaining consistent enterprise standards
• Develop and maintain reports, dashboards, metrics, and audit ready vulnerability data to support risk management, compliance, and oversight
• Drive continuous improvement by identifying recurring security weaknesses, recommending process and tool enhancements, and influencing stakeholders to strengthen security practices

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.