Job opportunity
Sr. Engineer - Vulnerability Management CA Flexible Location
OnX
Responsibilities
Triage security events from our MDR platform, validate and reclassify severity based on operational context, coordinate response for critical incidents, enrich vulnerability findings using CVSS, CISA KEV, and EPSS data, build and maintain a prioritized remediation queue, help drive asset criticality designation, develop and maintain incident response playbooks, and participate in weekly and monthly reporting.
Qualifications
SOC or vulnerability management analyst experience, familiarity with MDR/SIEM alert triage, understanding of vulnerability prioritization frameworks (CVSS/KEV/EPSS), ITSM ticketing experience, comfort with a rotating on-call schedule, eligibility for Canadian security clearance, Canadian residency.
Nice to Have
Security+, CySA+, GCIH, or similar certifications; prior experience supporting a public sector, law enforcement, or financial services client; incident response playbook authoring experience.
Work Environment
Primarily remote, based in Canada, with availability aligned to Eastern time for on-call coverage. Minimal to no on-site work expected.
Interview Process
Recruiter conversation, hiring manager conversation, technical panel (triage and prioritization scenario), clearance/residency confirmation, offer.
#J-18808-Ljbffr
Apply on source site Triage security events from our MDR platform, validate and reclassify severity based on operational context, coordinate response for critical incidents, enrich vulnerability findings using CVSS, CISA KEV, and EPSS data, build and maintain a prioritized remediation queue, help drive asset criticality designation, develop and maintain incident response playbooks, and participate in weekly and monthly reporting.
Qualifications
SOC or vulnerability management analyst experience, familiarity with MDR/SIEM alert triage, understanding of vulnerability prioritization frameworks (CVSS/KEV/EPSS), ITSM ticketing experience, comfort with a rotating on-call schedule, eligibility for Canadian security clearance, Canadian residency.
Nice to Have
Security+, CySA+, GCIH, or similar certifications; prior experience supporting a public sector, law enforcement, or financial services client; incident response playbook authoring experience.
Work Environment
Primarily remote, based in Canada, with availability aligned to Eastern time for on-call coverage. Minimal to no on-site work expected.
Interview Process
Recruiter conversation, hiring manager conversation, technical panel (triage and prioritization scenario), clearance/residency confirmation, offer.
#J-18808-Ljbffr