At Varicent, we’re not just transforming the Sales Performance Management (SPM) market—we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, and G2.

Varicent’s solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Build impactful solutions for customers worldwide.

Our Information Security team is seeking an experienced, hands‑on Security Engineering Manager to lead the health, performance, and continuous improvement of our security tooling ecosystem and own the maturity of our Incident Response program.

The position focuses on technical leadership, security program ownership, and managing external security vendors and service providers rather than directly managing an internal team.

This role owns complex, cross‑functional problems, including shaping how we secure user devices at scale, driving the performance of our Managed Detection and Response (MDR) partner, and ensuring the organization is prepared to respond to significant security events.

You will work closely with stakeholders across IT, Engineering, Cloud Operations, and business leadership to define and execute the endpoint security program roadmap, hold vendors accountable to defined service levels, and build organizational readiness through tabletop exercises, playbooks, and clear incident response procedures.

Endpoint Security Program Execution & Operations

Lead the healthy functioning of the security stack across endpoints, including EDR, DLP, ZTNA, PAM, and EPM, and drive continuous policy improvements across each.

Further mature and track health metrics for each tool (agent coverage, policy drift, false‑positive rates) and report on them to leadership.

Own the roadmap, as Service Owner, for tooling upgrades, migrations, and consolidation, coordinating with vendors and internal stakeholders.

Continue to mature and maintain playbooks, security architecture documentation, and standard operating procedures for the tooling under your ownership as Service Owner.

Administer and maintain ZTNA, DLP, EDR, and PAM policies, ensuring new policies are developed, tested, and rolled out without impact to end users or the business.

Managed Detection & Response (MDR) Vendor Oversight

Own the relationship with and performance management of Varicent's MDR vendor.

Oversee vendor performance on Tier 1 and Tier 2 alert triage and deep investigation, holding the vendor accountable for quality, timeliness, and depth of analysis.

Review vendor SLAs, escalation quality, and detection coverage on an ongoing basis; drive corrective action plans where performance gaps are identified.

Coordinate Tier 3 remediation activities across Varicent, partnering with IT, Engineering, and Cloud Operations to ensure timely closure.

Draft, lead, and execute required tabletop exercises annually, including scenario design, facilitation,



and after‑action reporting.

Drive continuous improvement of Incident Response readiness based on tabletop outcomes, real incidents, and industry lessons learned.

Act as a senior escalation point or incident lead during significant security events, coordinating cross‑functional response.

Coordinate day‑to‑day security activities with IT analysts, external vendors, managed service providers, and contractors supporting endpoint security operations and incident response.

Provide technical guidance and oversight to external service providers, ensuring alignment with security requirements, operational priorities, and service expectations.

Influence peers and cross‑functional partners across IT, Engineering, Cloud Operations, Legal, and Communications to align on security priorities and incident response commitments.

Share technical expertise and best practices with security engineers and cross‑functional stakeholders without direct people‑management responsibilities.

Communicate tooling health, vendor performance, and incident readiness to leadership through clear, risk‑based reporting.

Continuous Improvement & Risk‑Based Decision Making

Frame ambiguous, cross‑functional problems related to endpoint security and incident readiness, and propose approaches rather than waiting for direction.

Continuously identify opportunities to mature processes, strengthen controls, and improve security outcomes across teams by coordinating engagements with offensive security engineers.

Bachelor's degree in Computer Science, Information Security, Information Technology, or equivalent experience.

Minimum of 8 years of related experience in Security Engineering, Security Operations, or Incident Response; or 6 years with a Master's degree; At least one relevant information security certification (e.g., Hands‑on experience administering and improving endpoint security tools such as EDR, DLP, ZTNA, PAM, and EPM platforms, following the ITIL framework as a Service Owner delivering continuous service improvements.

Experience installing security agents and supporting IT teams with deployments through Intune, JAMF, and MDM.

Demonstrated experience managing or overseeing third‑party security vendors (e.g., Strong understanding of security standards and frameworks (e.g., Excellent written and verbal communication skills, with the ability to translate technical risk into business terms for leadership.

Proven ability to operate with significant autonomy on complex, ambiguous problems and coordinate work across internal teams and external service providers.

English proficiency is required.

Experience providing technical leadership or coordinating security operations across internal teams, external vendors, or managed service providers without direct people‑management responsibilities.

Experience with security automation and orchestration (SOAR) to streamline alert triage and remediation workflows.





Experience using AI for automation is a plus.

Familiarity with regulatory and compliance frameworks relevant to Varicent's business (e.g., Experience building or maturing an endpoint security program with a service management mindset.

Background in cloud security across major platforms (e.g., AWS, Azure Entra, and MDM).

Short‑Term (1–3 Months): Assess and Stabilize Develop a full understanding of the current security tooling stack, MDR vendor relationship, and existing Incident Response playbooks.

Identify immediate gaps in tooling coverage, policy configuration, or vendor performance.

Drive at least one significant tooling improvement or policy hardening initiative to completion.

Implement a formal vendor performance review cadence with the MDR provider, with clear corrective actions where needed.

Design and lead Varicent's annual tabletop exercise, including scenario development and after‑action reporting.

Long‑Term (7+ Months): Own and Mature Demonstrate measurable improvement in tooling health metrics, vendor SLA performance, and incident response readiness.

Establish a security tooling roadmap that anticipates emerging threats and business needs.

Become the primary technical point of contact for endpoint security tooling strategy, vendor performance, and incident response across Varicent.

CAD $151,200 and CAD $187,200 . In addition to base salary, our compensation package may include bonuses, commissions for eligible sales roles, and a comprehensive advantages package. The actual base salary will vary based on factors including individual qualifications and market data, as objectively assessed during the interview process.

This posting is for a This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement - not replace - human decision‑making.

Comprehensive medical, dental, and vision coverage tailored to your local needs

PTO and public holidays to rest, recharge, and do what matters most

Dedicated time to give back and support the communities that matter to you

Dedicated learning days to support continuous growth, skill development, and professional learning

Compensation that reflects your market and your value

Retirement - Retirement plans designed to help you build long‑term financial security

Invest in your growth with support for continuing education and professional development

Work where you thrive, with remote and hybrid options available across most regions

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Varicent is also committed to compliance with all fair employment practices regarding citizenship and immigration status. By applying for a position at Varicent and/or by using this portal, you declare and confirm that you have read and agree to our Job Applicant Privacy Notice and that the information provided by you as part of your application is true and complete and includes no misrepresentation or material omission of fact

We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements. #

📌 Security Engineering Manager (Toronto)
🏢 Varicent
📍 Toronto