Enterprise vulnerability management specialists apply risk assessment and security testing across infrastructure, applications, cloud environments, APIs, and software delivery platforms.

At CMHC, this specialist operationalizes vulnerability management standards, application security practices, risk methodologies, and threat intelligence. The position executes the enterprise program consistently, maintains data integrity, and supports timely identification, prioritization, remediation, and escalation. It provides reliable vulnerability data for risk management, compliance, security oversight, and investigations.

Key Responsibilities:

- Identify and assess vulnerabilities across infrastructure, cloud, applications, APIs, and containers
- Validate findings, eliminate false positives, and determine exploitability and business impact
- Prioritize records using approved methodologies, threat intelligence, and OWASP guidance




- Coordinate remediation with infrastructure, development, architecture, cloud, and technology teams
- Monitor fixes, validate remediation, and escalate unresolved high-risk vulnerabilities

Requirements:

- Undergraduate degree or equivalent experience in a related technology field
- Minimum five years in information security or related disciplines
- Security certification completed or in progress with practical cybersecurity experience
- Experience using vulnerability scanning and application security testing tools
- Understanding of vulnerability management, cloud security, OWASP, and DevSecOps

Apply analytical vulnerability management, remediation coordination, and security risk expertise to support CMHC's enterprise security program.

📌 Enterprise Vulnerability Management Specialist (Ahuntsic)
🏢 Canada Mortgage Housing
📍 Ahuntsic