Information Security Engineer
4 weeks ago
Job Tittle: Information Security Engineer III
Location: Montreal, QC
MAIN RESPONSIBILITIES
Responsibilities include but are not limited to:
- Understands and advises on enterprise policies and technical standards with specific regard to vulnerability management and secure configuration.
- Able to successfully partner with other security and IT infrastructure professionals to assess potential impact from vulnerabilities specific to BNP’s environment and determine appropriate mitigating controls.
- Identify and recommend appropriate measures to manage and remediate vulnerabilities with the focus on reducing potential impacts on information resources to an acceptable level based upon BNP’s policies and standards.
- Build strong partnerships with technical teams to promote best practices for managing vulnerabilities in an agile manner; across traditional infrastructure and in cloud environments.
- Ability to fully understand business requirements and work with business partners to define appropriate solutions; meeting both security mandates and business needs.
- Review and/or escalate exception requests submitted to the VM team
- Using a risk based approach, analyze BNP’s vulnerability data against open / closed information sources to best prioritize vulnerability hygiene activities.
- Develop and improve KPIs, metrics, and trend analysis for vulnerability management functions.
- Assist the team to maintain appropriate documentation that defines the Threat & Vulnerability Management Program, policies, and procedures.
REQUIREMENTS
TRAINING AND OCCUPATIONAL EXPERIENCE
- B.S. in Computer Science or equivalent field
- CISSP, CISM or similar industry certification
- +5 years of experience in Vulnerability Management or related field
ESSENTIAL SPECIFIC REQUIREMENTS
- Expertise knowledge of the Vulnerability Management process including vulnerability identification, false negative/positives identification & elimination
- Strong knowledge of Qualys, Nexpose or Nessus including configuration and maintenance, scan execution, agent deployment and oversight
- Experience of industry standards relating to Vulnerability Management including Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS) and Open Web Application Security Project (OWASP).
- Experience Security Standards/Controls specified under various IT governance and compliance models (NIST, HIPAA, PCI, GDPR, ISO 27001&27002).
- Experience of technology and security topics including operating systems, network security, protocols, application security, infrastructure hardening and security baselines.
- Previous experience working in large-scale environments with diverse technologies is a must.
- Knowledge of scripting languages desired
SKILLS AND BEHAVIOURS
- Analytical skills
- Strategic vision
- Rigor & Accuracy
- Flexibility
- Communication skills
- Collaboration
- Self-driven
- Team player
-
Senior Information Security Engineer
4 weeks ago
Montréal, QC, Canada Axelon Services Corporation Full timeJob Tittle: Information Security Engineer III Location: Montreal, QC Understands and advises on enterprise policies and technical standards with specific regard to vulnerability management and secure configuration. Able to successfully partner with other security and IT infrastructure professionals to assess potential impact from vulnerabilities...
-
Security Engineer
1 day ago
Montréal, QC, Canada Soho Square Solutions Full timeJob Title: Security Engineer Location: Montreal (day 1 onboarding onsite – in-office presence required 3x/week) Duration: 1 Year (Contract) Level: Mid-level We are seeking a security engineer to build the firm’s next generation Policy Based Access Control (PBAC) solution. This role will reside within the firm’s Cyber organization within the Identity...
-
Security Engineer
8 hours ago
Montréal, QC, Canada Soho Square Solutions Full timeJob Title: Security Engineer Location: Montreal (day 1 onboarding onsite – in-office presence required 3x/week) Duration: 1 Year (Contract) Level: Mid-level We are seeking a security engineer to build the firm’s next generation Policy Based Access Control (PBAC) solution. This role will reside within the firm’s Cyber organization within the Identity...
-
Information Security Manager
3 weeks ago
Montréal, Canada EDGE10 Group Full timeEDGE10[DL1] Group is perfecting human performance. We provide the world's leading health, performance and physical testing platform to organisations around the world, empowering them with actionable insights, leading to efficient, high quality decision making. As market leader, we work with organisations across the medical and performance spectrums, from...
-
GCP Security Engineer
2 weeks ago
Montréal, QC, Canada Net2Source Inc. Full timeTitle- GCP Security Engineer Location- Montreal QC Duration-Contract (12-months) Job Description: We are seeking a skilled GCP Security Engineer specializing in SecDevOps to enhance our security posture across our Google Cloud Platform (GCP) environment. In this role, you will collaborate closely with development and operations teams to integrate...
-
GCP Security Engineer
2 weeks ago
Montréal, QC, Canada Net2Source Inc. Full timeTitle- GCP Security Engineer Location- Montreal QC Duration-Contract (12-months) Job Description: We are seeking a skilled GCP Security Engineer specializing in SecDevOps to enhance our security posture across our Google Cloud Platform (GCP) environment. In this role, you will collaborate closely with development and operations teams to integrate...
-
GCP Security Engineer
2 weeks ago
Montréal, QC, Canada Lorven Technologies Inc. Full timeJob Summary: We are seeking a skilled GCP Security Engineer specializing in SecDevOps to enhance our security posture across our Google Cloud Platform (GCP) environment. In this role, you will collaborate closely with development and operations teams to integrate security practices into the DevOps pipeline. Your expertise will help ensure the secure...
-
Information Security Advisor
2 weeks ago
Montréal, Canada Equisoft Full time**Information security advisor** Equisoft, a leading global provider of digital business solutions for the insurance and wealth industries, is actively seeking new talent! If you are willing to play a strategic role that has a real impact on the organization's ongoing growth and you're looking to evolve within a dynamic international context, please send...
-
Cloud Security Engineer
4 weeks ago
Montréal, QC, Canada LanceSoft, Inc. Full timePosition Description: The Cloud Security Engineer is responsible for designing, implementing, and supporting Investment Management including but not limited to AWS & Azure environments. They work as a part of the larger Cloud Security and Risk Management organization consisting of Compliance, Governance and Security functions to build effective, secure and...
-
Cloud Security Engineer
4 weeks ago
Montréal, QC, Canada LanceSoft, Inc. Full timePosition Description: The Cloud Security Engineer is responsible for designing, implementing, and supporting Investment Management including but not limited to AWS & Azure environments. They work as a part of the larger Cloud Security and Risk Management organization consisting of Compliance, Governance and Security functions to build effective, secure and...
-
Head of Information Security
3 weeks ago
Montréal, Canada WSP Full time**WSP **is one of the world's leading professional services firms. Our purpose is to future proof our cities and environments. We have over 65,000 team members across the globe. In Canada, our 12,000+ people are involved in everything from environmental remediation to urban planning, from engineering iconic buildings to designing sustainable transportation...
-
Security RACF Engineer
1 week ago
Montréal, QC, Canada Net2Source Inc. Full timeTitle- Security RACF Engineer Location- Montreal QC (Hybrid) Duration-Contract (12-months) Job Description: Duties and responsibilities will include but are not limited to the following: Design / support firm’s mainframe initiatives related to authentication (such as Kerberos, Digital Certificates, encryption, MFA), authorization (such as role-based...
-
Security RACF Engineer
1 week ago
Montréal, QC, Canada Net2Source Inc. Full timeTitle- Security RACF Engineer Location- Montreal QC (Hybrid) Duration-Contract (12-months) Job Description: Duties and responsibilities will include but are not limited to the following: Design / support firm’s mainframe initiatives related to authentication (such as Kerberos, Digital Certificates, encryption, MFA), authorization (such as role-based...
-
Security RACF Engineer
7 days ago
Montréal, QC, Canada Net2Source Inc. Full timeTitle- Security RACF Engineer Location- Montreal QC (Hybrid) Duration-Contract (12-months) Job Description: Duties and responsibilities will include but are not limited to the following: Design / support firm’s mainframe initiatives related to authentication (such as Kerberos, Digital Certificates, encryption, MFA), authorization (such as role-based...
-
Information Security, Privacy
4 weeks ago
Montréal, Canada Mistplay Full time**la version française de ce document arrive bientôt** Mistplay is looking for a talented Information Security, Privacy and Data Governance Lead to join Mistplay’s team. You will report to Mistplay’s General Counsel and Chief Privacy Officer while also working closely with Mistplay Chief Data and AI Officer and our Head of Engineering. This role is...
-
Information Security Analyst
15 hours ago
Montréal, QC, Canada Morgan Stanley Full timeInformation Security Analyst (Hybrid) Job Number: 3260878 POSTING DATE: Oct 25, 2024 PRIMARY LOCATION: Americas-Canada-Quebec-Montreal EDUCATION LEVEL: Bachelor's Degree JOB: Other EMPLOYMENT TYPE: Full Time JOB LEVEL: Associate DESCRIPTION We're seeking someone to join our Incident Response team as an Analyst in the Cyber Data Risk & Resilience...
-
Security Engineer
1 day ago
montréal, Canada Soho Square Solutions Full timeJob Title: Security EngineerLocation: Montreal (day 1 onboarding onsite – in-office presence required 3x/week)Duration: 1 Year (Contract)Level: Mid-levelWe are seeking a security engineer to build the firm’s next generation Policy Based Access Control (PBAC) solution. This role will reside within the firm’s Cyber organization within the Identity &...
-
Security Engineer
1 day ago
montréal, Canada Soho Square Solutions Full timeJob Title: Security EngineerLocation: Montreal (day 1 onboarding onsite – in-office presence required 3x/week)Duration: 1 Year (Contract)Level: Mid-levelWe are seeking a security engineer to build the firm’s next generation Policy Based Access Control (PBAC) solution. This role will reside within the firm’s Cyber organization within the Identity &...
-
Information Security Consultant
2 weeks ago
Montréal, QC, Canada Hamilton Barnes Full timeInformation Security Consultant (Montreal - Hybrid): Up to $100,000 Base Une organisation spécialisée dans les risques de cybersécurité, innovante et en croissance rapide, est à la recherche d'un spécialiste expérimenté de la sécurité de l'information et de la conformité pour rejoindre son équipe hautement technique. Travaillez avec...
-
Information Security Consultant
2 weeks ago
Montréal, QC, Canada Hamilton Barnes Full timeInformation Security Consultant (Montreal - Hybrid): Up to $100,000 Base Une organisation spécialisée dans les risques de cybersécurité, innovante et en croissance rapide, est à la recherche d'un spécialiste expérimenté de la sécurité de l'information et de la conformité pour rejoindre son équipe hautement technique. Travaillez avec...