Enterprise vulnerability management specialists apply risk assessment and security testing across infrastructure, applications, cloud environments, APIs, and software delivery platforms.
At CMHC, this specialist operationalizes vulnerability management standards, application security practices, risk methodologies, and threat intelligence. The position executes the enterprise program consistently, maintains data integrity, and supports timely identification, prioritization, remediation, and escalation. It provides reliable vulnerability data for risk management, compliance, security oversight, and investigations.
Key Responsibilities: Identify and assess vulnerabilities across infrastructure, cloud, applications, APIs, and containers
Validate findings, eliminate false positives, and determine exploitability and business impact
Prioritize records using approved methodologies, threat intelligence, and OWASP guidance




Coordinate remediation with infrastructure, development, architecture, cloud, and technology teams
Monitor fixes, validate remediation, and escalate unresolved high-risk vulnerabilities
Requirements: Undergraduate degree or equivalent experience in a related technology field
Minimum five years in information security or related disciplines
Security certification completed or in progress with practical cybersecurity experience
Experience using vulnerability scanning and application security testing tools
Understanding of vulnerability management, cloud security, OWASP, and DevSecOps
Apply analytical vulnerability management, remediation coordination, and security risk expertise to support CMHC’s enterprise security program.

#J-18808-Ljbffr

📌 Enterprise Vulnerability Management Specialist (Quebec City)
🏢 Canada Mortgage Housing
📍 Quebec City