Vulnerability Management & Hardening SME

Job Description

Vulnerability Management & Hardening SME
On behalf of our Consulting client, Procom is searching for a Vulnerability Management & Hardening SME for a 6 month contract role. This position is a hybrid position with 2 days onsite at our client’s Toronto office.

Vulnerability Management & Hardening SME - Job Description:
The role involves leading the development and operationalization of enterprise hardening standards across various technological environments, focusing on establishing secure configuration baselines. The position supports enterprise-wide vulnerability management initiatives, aiming to improve the security posture through enforceable controls.

Vulnerability Management & Hardening SME - Responsibilities:
• Develop and maintain enterprise hardening standards across critical technology platforms
• Establish secure configuration baselines for Windows, Linux, servers, endpoints, and more
• Map hardening standards to CIS Benchmarks and NIST Cybersecurity Framework controls
• Define validation and compliance mechanisms for all standards
• Translate vulnerability findings into actionable remediation and hardening requirements
• Produce audit-ready documentation, standards, procedures, and governance artifacts
• Collaborate with infrastructure, cloud, security, and operations teams to drive adoption
• Support enterprise risk reduction and continuous improvement initiatives

Vulnerability Management & Hardening SME - Mandatory Skills:
• 5–10+ years of cybersecurity experience
• Strong expertise in vulnerability management and secure configuration management
• Deep knowledge of CIS Benchmarks and NIST Cybersecurity Framework (CSF)
• Strong infrastructure security experience with Windows, Linux, and Active Directory
• Experience with cloud security controls across Azure, Oracle Cloud, and/or GCP
• Experience with vulnerability management and security assessment tools
• Proven experience creating enterprise security standards and governance documentation

Vulnerability Management & Hardening SME – Nice-to-Have Skills:
• Experience operationalizing hardening standards across large enterprise environments
• Cloud Security Posture Management (CSPM) experience
• Experience supporting audits and regulatory compliance initiatives
• Financial services or other highly regulated industry experience
• Security architecture or governance experience

Vulnerability Management & Hardening SME – Assignment Length:
This is a 6 month contract position.

Vulnerability Management & Hardening SME - Start Date:
ASAP.

Vulnerability Management & Hardening SME - Assignment Location:
Toronto, Ontario, Canada. Hybrid work model with 2 days per week onsite.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.