Role: Vulnerability management (Remote, Canada) Location: Remote (Canada)

Employment Type: Contract

Work Authorization: Open Work Permit (OWP), PR, Canadian Citizen only Mandatory Skills for Vulnerability Management Regarding skills for appsec. We need below hands-on experience and not only tool based.

AppSec

- Web Application Security - Mobile Application Security - API Security - SAST (Static Application Security Testing), SCA (Software Composition Analysis) - Vulnerability Management lifecycle VM: Risk Assessment & Prioritization Ability to assess vulnerabilities based on risk, not just severity—considering CVSS scores, exploitability, asset criticality, business impact, and threat intelligence to prioritize remediation effectively.

Vulnerability

Scanning &

• Tool Proficiency Hands-on expertise with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7, OpenVAS) and the ability to interpret scan results accurately, reduce false positives, and tune scans for different environments. Patch &

• Remediation Management Strong coordination skills to drive timely patching and mitigation—working with IT, cloud, DevOps, and application teams to remediate vulnerabilities while minimizing operational and business disruption. Reporting &

• Stakeholder Communication Ability to translate technical vulnerability data into clear, actionable reports for different audiences (engineers, management, auditors), including dashboards, trends, SLAs, and risk narratives. Compliance &

• Continuous Improvement Knowledge of security frameworks and standards and the skill to embed vulnerability management into continuous security processes, audits, and metrics-driven improvement.

Summary The Vulnerability Management Specialist – Application Security is responsible for end to end management of application security vulnerabilities across the SDLC using SAST, DAST, and SCA tools, with a strong focus on risk based prioritization, remediation tracking, and posture visibility through ASPM platforms.

Technical Skills Strong hands on experience with:

- SAST (e.g.,



AppScan, Check Marx, GitHub Advanced Security) - DAST tools and runtime testing approaches - SCA / OSS security and dependency risk analysis Working knowledge of ASPM platforms and vulnerability aggregation. Understanding of OWASP Top 10, secure coding practices, and application threat models. Soft Skills - Must be from global support background.
- Robust documentation, presentation, and communication skills Experience - 8-10 + years of experience in application security or vulnerability management roles.
- Experience supporting enterprise scale AppSec programs with multiple applications and teams.

Key Responsibilities - Interpret findings across SAST, SCA, Secrets, API and Mobile scanning (tools like GitHub Advanced Security, Traceable, etc) - Hand-off findings to development teams for remediation - Provide technical remediation assistance to product development teams - Track and report remediation progress - Facilitate extension requests for remediation timelines - Collaborate across teams using JIRA for ticketing and dashboards - Familiarity with RBVM/ASPM tools like ArmorCode, Seemplicity, Brinqa a plus.

- Should have good knowledge of information security areas as Vulnerability Management Lifecycle, hardening controls (CIST, NIST) etc.
- Good understanding of information security related fields, including security operations and administration - Should possess good understanding of assets, threats and vulnerabilities and their correlation in an organization - Good understanding of vulnerability reports from tools like Qualys/ Tenable etc.
- Hands on experience on vulnerability prioritization tool, RiskSense or Kenna would be a plus - Strong practical knowledge of vulnerability remediation tracking across infrastructure, applications, and teams/ 3rd parties - Knowledge on vulnerability exception management process - Strong practical knowledge on presenting vulnerability remediation tracking updates to the management - Hands on experience on vulnerability patching - Should have a good customer handling skill - Good to have Experience on vulnerability scanning tools Like Qualys and Tenable.

📌 Remote Vulnerability Management Specialist Application Security (Whitby)
🏢 Bilinguallink
📍 Whitby