24 Oct
|
Varicent
|
Canada
At Varicent, we’re not just transforming the Sales Performance Management (SPM) market—we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, and G2. Varicent’s solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Build impactful solutions for customers worldwide. Our Information Security team is seeking an experienced, hands‑on Security Engineering Manager to lead the health, performance, and continuous improvement of our security tooling ecosystem and own the maturity of our Incident Response program. The position focuses on technical leadership, security program ownership, and managing external security vendors and service providers rather than directly managing an internal team. This role owns complex, cross‑functional problems, including shaping how we secure user devices at scale, driving the performance of our Managed Detection and Response (MDR) partner, and ensuring the organization is prepared to respond to significant security events. You will work closely with stakeholders across IT, Engineering, Cloud Operations, and business leadership to define and execute the endpoint security program roadmap, hold vendors accountable to defined service levels, and build organizational readiness through tabletop exercises, playbooks, and clear incident response procedures.
Endpoint Security Program Execution & Operations Lead the healthy functioning of the security stack across endpoints, including EDR, DLP, ZTNA, PAM, and EPM, and drive continuous policy improvements across each. Further mature and track health metrics for each tool (agent coverage, policy drift, false‑positive rates) and report on them to leadership. Own the roadmap, as Service Owner, for tooling upgrades, migrations, and consolidation, coordinating with vendors and internal stakeholders. Continue to mature and maintain playbooks, security architecture documentation, and standard operating procedures for the tooling under your ownership as Service Owner. Administer and maintain ZTNA, DLP, EDR, and PAM policies, ensuring recent policies are developed, tested, and rolled out without impact to end users or the business. Managed Detection & Response (MDR) Vendor Oversight Own the relationship with and performance management of Varicent's MDR vendor. Oversee vendor performance on Tier 1 and Tier 2 alert triage and deep investigation, holding the vendor accountable for quality, timeliness, and depth of analysis. Review vendor SLAs, escalation quality, and detection coverage on an ongoing basis; drive corrective action plans where performance gaps are identified. Coordinate Tier 3 remediation activities across Varicent, partnering with IT, Engineering, and Cloud Operations to ensure timely closure. Draft, lead,
and execute required tabletop exercises annually, including scenario design, facilitation, and after‑action reporting. Drive continuous improvement of Incident Response readiness based on tabletop outcomes, real incidents, and industry lessons learned. Act as a senior escalation point or incident lead during significant security events, coordinating cross‑functional response. Coordinate day‑to‑day security activities with IT analysts, external vendors, managed service providers, and contractors supporting endpoint security operations and incident response. Provide technical guidance and oversight to external service providers, ensuring alignment with security requirements, operational priorities, and service expectations. Influence peers and cross‑functional partners across IT, Engineering, Cloud Operations, Legal, and Communications to align on security priorities and incident response commitments. Share technical expertise and best practices with security engineers and cross‑functional stakeholders without direct people‑management responsibilities. Communicate tooling health, vendor performance, and incident readiness to leadership through clear, risk‑based reporting. Continuous Improvement & Risk‑Based Decision Making Frame ambiguous, cross‑functional problems related to endpoint security and incident readiness, and propose approaches rather than waiting for direction. Continuously identify opportunities to mature processes, strengthen controls, and improve security outcomes across teams by coordinating engagements with offensive security engineers. Bachelor's degree in Computer Science, Information Security, Information Technology, or equivalent experience. Minimum of 8 years of related experience in Security Engin
📌 Security Engineering Manager (Canada)
🏢 Varicent
📍 Canada