Vulnerability management and application security are central to this Security Engineer role at Varicent, spanning scanning, remediation, testing, and automation. You will own defined security workstreams and improve vulnerability outcomes across infrastructure, endpoints, applications, and cloud environments. The position includes validating findings, coordinating remediation, supporting security checks in CI/CD pipelines, and assessing AI-enabled tools.

You will also conduct risk assessments and STRIDE threat models while partnering with system owners.

Key Responsibilities

- Perform infrastructure, endpoint, application, and secure baseline scanning
- Validate findings, prioritize risks, and coordinate remediation
- Conduct pentest validation and AI red teaming tests
- Integrate SAST, DAST, SCA,



and attack surface management
- Automate manual vulnerability workflow steps Requirements:
- Five-plus years in Security Engineering, Operations, or Information Security
- Experience securing cloud environments, systems, networks, databases, and applications
- Experience with vulnerability scanners and security tools
- Preferred Python, PowerShell, or Bash security automation experience
- Preferred CI/CD security integration and STRIDE assessment experience Use application security, vulnerability testing, and automation skills to strengthen risk outcomes as Varicent’s Security Engineer.

📌 Application Vulnerability Security Engineer (Toronto)
🏢 Varicent
📍 Toronto