Information Security Engineer III - Daily

The position at a glance

We are currently seeking an IT Infra & Cyber Security Specialist with expertise in Vulnerability Management to be located in our Montreal site.

This position will report to the Production Security Vulnerability Management head.

In detail

• Perform BAU activities of Production Security Vulnerability Management function, including : Asset / Scanning reconciliation, Vulnerability Scanning, Assessment, Remediation Support / Coordination & Reporting.
• On-going support to remediation stakeholders to assess, prioritize and track execution of remediation efforts.
• Deliver Vulnerability Management reporting and analytics functions on a scheduled basis and support ad-hoc report requests
• Develop and improve KPIs, metrics, and trend analysis for vulnerability management functions.
• Maintain appropriate documentation that defines the Vulnerability Management Program, policies, and procedures.
• Ability to fully understand business requirements and work with business partners to define appropriate solutions; meeting both security mandates and business needs.
• Build strong working relationships with IT Infrastructure, Development & Application Support teams to achieve remediation objectives driven by BAU & Project related priorities
• Contribute to related Governance / Steering committees, associated KPI reporting and action tracking

The strengths and skills that will help you succeed

• Experience with VM scanning tools (Nexpose, Qualys, Tanium)
• Strong written and verbal communication skills
• Strong overall IT Infrastructure and Cyber Security expertise
• Strong experience with operating systems, network security, protocols, application security, infrastructure hardening and security baselines.
• Experience with Reporting / BI platforms (ie, PowerBI, JIRA and similar platforms)
• Experience working with large data sets and ability to summarize findings to achieve target objectives
• Ability to coordinate, build relationships, and represent Production Security with stakeholders
• Process improvement experience, ability to identify feasible solutions and recommend new approaches
• Solid problem solving & analytical skills; must be resourceful, innovative, results driven and adaptable
• Extensive experience with MS Office products including Word, Excel, PowerPoint, Outlook and others
• Experience of industry standards relating to Vulnerability Management including Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS)
• Experience Security Standards / Controls specified under various IT governance and compliance models (NIST, HIPAA, PCI, GDPR, ISO &).
• Previous experience working in large-scale environments with diverse technologies is a must

Preferred Qualifications :

• in Computer Science or equivalent field
• Minimum of +years of professional experience
• IT Development / Infrastructure background (Developer, DevOps, System Admin)
• Industry certifications such as CISM, CISSP, CRISC or similar
• Financial Services background

About US Tech Solutions :

US Tech Solutions is a global staff augmentation firm providing a wide range of talent on-demand and total workforce solutions.

To know more about US Tech Solutions, please visit .

US Tech Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.