Job Title: Vulnerability Engineer
Job Location: Remote- Canada
** Please note, this role is not able to offer visa transfer or sponsorship now or in the future**
We are seeking a highly skilled Vulnerability Engineer to lead and execute enterprise vulnerability remediation initiatives across end-user computing platforms. The ideal candidate will possess strong expertise in vulnerability management, endpoint security, operating systems, and automation, with a focus on reducing security risk while maintaining platform stability and user experience.
This role will work closely with Cybersecurity, Engineering, Infrastructure, and Operations teams to identify, prioritize, remediate, and validate vulnerabilities across Windows, macOS, Citrix, Microsoft 365, Microsoft Teams, browsers, and other enterprise platforms. The successful candidate will also drive automation, operational excellence, and continuous security improvements across the environment.
In this role, you will
Execute and coordinate vulnerability remediation activities across Windows, macOS, Citrix, Microsoft Teams, Microsoft 365, web browsers, and other end-user computing platforms to mitigate security risks and maintain a secure enterprise environment.
Analyze vulnerability findings and implement appropriate remediation strategies, including security patches, configuration changes, and platform hardening measures.
Design, develop, and enhance automated remediation solutions to improve remediation speed, consistency, scalability, and operational efficiency.
Leverage SCCM/MECM and endpoint management tools to deploy, monitor, and validate security updates and remediation activities across enterprise endpoints.
Collaborate closely with Cybersecurity, Endpoint Engineering, Infrastructure, and Operations teams to ensure vulnerabilities are remediated within defined service level objectives (SLOs).
Test, validate, and verify remediation deployments to ensure successful implementation while minimizing disruption to platform stability and end-user experience.
Develop and maintain repeatable remediation processes, engineering standards, operational runbooks, technical documentation, and remediation procedures to support ongoing security operations.
Support response efforts for critical security incidents, zero-day threats, and high-priority vulnerabilities, ensuring timely and effective risk mitigation.
Monitor vulnerability remediation metrics, compliance status, and operational performance, identifying opportunities to improve automation, efficiency, and overall remediation effectiveness.
Drive continuous improvement initiatives focused on reducing technical debt, modernizing endpoint management capabilities, strengthening security controls, and improving the overall security posture of enterprise platforms.
What you’ll need to succeed (required skills)
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent industry experience.
7+ years of experience in Vulnerability Management, Endpoint Engineering, Security Operations, or Infrastructure Security.
7+ years of hands-on experience with Microsoft SCCM (Configuration Manager) and enterprise endpoint management.
Strong understanding of vulnerability management lifecycle, remediation methodologies, and security best practices.
Experience supporting enterprise-scale Windows and macOS environments.
Working knowledge of Citrix virtual desktop environments and Microsoft 365 ecosystem.
Experience implementing system hardening standards, security baselines, and configuration management controls.
Strong troubleshooting, analytical, and problem-solving skills.
Excellent verbal and written communication skills with the ability to work across multiple technical teams.
Technical Skills
Mandatory Skills
SCCM / Microsoft Endpoint Configuration Manager (MECM) – 7+ years
Vulnerability Management – 7+ years
Windows Endpoint Administration
macOS Administration
Microsoft 365 Security & Administration
Citrix Technologies
Security Patch Management
Endpoint Security & Platform Hardening
Preferred Skills
Microsoft Intune and Modern Endpoint Management
PowerShell, Python, or other automation scripting languages
Vulnerability scanning platforms such as Tenable, Qualys, Rapid7, or similar
Microsoft Defender Suite
Security Compliance Frameworks and Risk Management Practices
ITIL-based operational processes
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
Long-term/Short-term Disability
Paid Parental Leave
Work model:
At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance though our various wellbeing programs. Based on this role’s business requirements, it is a remote role in Canada.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
“Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
À propos de Cognizant
Cognizant (NASDAQ : CTSH) est un AI Builder et une entreprise de services numériques (ESN) élaborant des solutions complètes d’IA maximisant les investissements pour des résultats concrets. Sa profonde expertise des métiers, des processus et des technologies lui permet d’intégrer dans les systèmes technologiques le contexte unique de chaque organisation de l’ingénierie à la production à l’échelle. Son objectif : améliorer l’efficacité des équipes, créer de la valeur et permettre aux grandes entreprises de rester performantes dans un monde qui évolue rapidement. Pour en savoir plus : cognizant.ai ou @cognizant.
Renseignments suppplémentaires sur l'emploi
Les informations sur la rémunération sont exactes à la date de publication. Cognizant se réserve le droit de modifier ces informations à tout moment, conformément aux lois applicables.
Les exigences linguistiques varient selon les postes, mais nous demandons à tous les candidats d’avoir une connaissance de base de l’anglais afin de faciliter les communications internes à l’échelle de l’entreprise. Pour les postes basés au Québec, une maîtrise de l’anglais est requise puisque vous fournirez des services et collaborerez avec des parties prenantes situées hors de la province, qui ne parlent pas nécessairement le français.
Cognizant est un employeur souscrivant au principe de l’égalité d’accès à l’emploi. Votre candidature et votre dossier ne seront pas examinés en fonction de la race, de la couleur, du sexe, de la religion, des croyances, de l'orientation sexuelle, de l'identité de genre, de l'origine nationale, du handicap, de l'information génétique, de la grossesse, du statut d'ancien combattant ou de toute autre caractéristique protégée telle que décrite par les lois fédérales, provinciales ou locales.
Si vous avez un handicap qui nécessite un aménagement raisonnable pour rechercher une offre d'emploi ou poser une candidature, envoyiez un courriel à [email protected] avec votre demande et vos coordonnées.
