{"id":3195107,"url":"https://alion.io/job/varicent-security-engineer-2","title":"Security Engineer","company":{"id":686603,"name":"Varicent","domain":"varicent.com","url":"https://alion.io/company/varicent","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":129000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":53},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-24T03:13:57Z","employer_posted_date":"2026-10-24","last_verified_at":"2026-10-29T11:05:12Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"At Varicent, we’re not just transforming the Sales Performance Management (SPM) market-we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, and G2. Our solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Here’s why you’ll thrive at Varicent:\nInnovate with Purpose: Build impactful solutions for customers worldwide.\nJoin Excellence: Work in a diverse, collaborative, and innovative team.\nShape the Future: Lead in redefining revenue optimization.\nGrow Together: Unlock your potential in a supportive environment.\nJoin us at Varicent-where your talent and ambition meet limitless opportunities for success!\nThe Security Engineer is a fully qualified, career-level engineer who independently owns defined security workstreams across operations and engineering. You will own the day-to-day health of assigned security tools, investigate security events end to end, and drive vulnerability and risk outcomes within your area.\nYou receive little instruction on day-to-day work and general direction on new assignments. You break down moderately complex problems, decide the right approach, and make sound decisions with incomplete information, escalating issues that fall outside your domain or carry high business impact.\nYou will partner with Cloud Operations, Engineering, IT and business teams, building working relationships with senior personnel in your area to strengthen our security posture through reliable execution, continuous improvement and risk-based judgement.\nKey responsibilities\nSecurity tooling and engineering\nOwn the deployment, configuration, testing, monitoring and maintenance of assigned security tools, which may include SIEM, EDR/CNAPP, DLP, ZTNA, WAF, CASB, Secure Web Gateway, URL filtering, email security and application/vulnerability scanning platforms.\nLead medium size security initiatives end to end; gather requirements, choose the technical approach, then test, pilot and implement.\nRun proof-of-concepts and product evaluations, assess fit against our security standards and recommend a decision to the team.\nAs service owner for your tool(s), identify and implement enhancements, keep runbooks current and resolve operational issues without needing direction.\nDocument procedures, workflows, architecture diagrams and playbooks for the tools and processes you own.\nSecurity monitoring, triage and incident response\nIndependently triage and investigate security events using SIEM, EDR, DLP, WAF, CASB, SWG and email security tools.\nJudge the severity of each event, decide when to contain, close or escalate, and escalate high-impact incidents promptly.\nApply incident response playbooks, adapting your approach when a situation does not fit the playbook exactly.\nDocument root cause and lessons learned and recommend fixes that prevent recurrence.\nVulnerability management and security testing\nPerform secure baseline reviews, infrastructure, endpoint and application vulnerability scanning, pentest validation and AI red teaming tests.\nValidate findings for accuracy, prioritise them by risk and drive remediation with system owners through to closure.\nEscalate critical risks and zero-day vulnerabilities, and coordinate mitigation steps with affected teams.\nIdentify and automate manual steps in vulnerability workflows, and help integrate SAST, DAST, SCA and External Attack Surface Management into CI/CD pipelines.\nRisk assessments, threat modeling and third-party risk\nConduct security risk assessments for internal initiatives, product enhancements, vendors and productivity tools, weighing multiple risk factors to reach a clear recommendation.\nPerform STRIDE threat modeling for internal projects and AI-enabled tools, producing risk reports with practical mitigations.\nApply working knowledge of Agentic AI concepts and AI security risks to assess AI-related initiatives.\nComplete vendor risk assessments in OneTrust as part of the third-party risk management program.\nContinuous improvement & Service Ownership\nIdentify and implement improvements to processes and controls within your area of ownership as the Service Owner.\nStay current on security threats and best practices and share relevant learnings with the team and partner teams.\nKnowledge, skills and experience\nRequired\n5+ years of experience in Information Security, Security Engineering or Security Operations with a Bachelor's degree in Information Security, Computer Science, Computer Engineering, Technology Management or a related field; or equivalent work experience.\nAt least one information security certification (e.g., CISSP, CISA, CCSP or equivalent).\nFull working knowledge of securing cloud environments, operating systems, networks, databases and applications.\nHands-on experience operating public cloud platforms (e.g., AWS, IBM Cloud).\nHands-on experience owning security tools such as SIEM, WAF, DLP, EDR and infrastructure/application vulnerability scanners.\nUnderstanding of security frameworks (e.g., NIST CSF, ISO 27001/27002) and experience supporting controls aligned to SOC 1, SOC 2, PCI and HIPAA.\nProven ability to break down problems, choose an approach and make sound decisions with incomplete information, which ultimately leads to solutions.\nStrong written and verbal communication, including explaining risk clearly to technical and non-technical stakeholders.\nHigh accountability and a continuous learning mindset.\nFluent in English.\nPreferred\nExperience integrating security checks into CI/CD pipelines (e.g., scanning, alerting, ticket creation, gating).\nSecurity automation with Python, PowerShell or Bash.\nHands-on experience with OneTrust workflows, evidence management and assessment reporting.\nExperience conducting risk assessments with the STRIDE methodology.\nWhat success looks like\nFirst 1-3 months: Ramp up and own the day-to-day\nBecome proficient with our security tooling, alert queues and incident response workflows, and take ownership of assigned tools.\nHandle triage and investigations independently, with high-quality documentation and well-judged escalation.\nAssess current vulnerability scanning coverage and propose improvements to data quality and prioritisation.\nMonths 4-6: Own a service(s) and improve processes\nBe the subject matter expert for a service and associated capabilities and processes from requirements through implementation.\nImprove vulnerability management outcomes through better triage, stakeholder follow-through and closure rates.\nDeliver risk assessments and STRIDE threat models for assigned projects, including AI-enabled tools, with minimal review.\nMonth 7 onward: Measurable impact in your domain\nShow measurable efficiency gains in your area through automation, process maturity or better signal quality.\nReduce recurring security issues in your area through root-cause-driven fixes.\nBe a trusted security partner to Engineering, Cloud and IT teams through consistent execution and practical recommendations.\nThe expected base salary range for this role is C$105,000 - C$130,000, and individuals may be eligible to participate in our variable compensation program. Final compensation may vary based on experience, skills, designations and market conditions.\nThis posting is for an existing vacancy.\nThis hiring process uses artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.\nVaricent is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you require accommodation at any time during the recruitment process please email \nVaricent is also committed to compliance with all fair employment practices regarding citizenship and immigration status. By applying for a position at Varicent and/or by using this portal, you declare and confirm that you have read and agree to our Job Applicant Privacy Notice and that the information provided by you as part of your application is true and complete and includes no misrepresentation or material omission of fact","description_format":"text","description_chars":8783,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Sales Enablement"],"lifecycle":[{"event":"open","at":"2026-10-24T04:06:15Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":54,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/varicent-security-engineer-2","json_url":"https://alion.io/job/varicent-security-engineer-2.json","meta":{"generated_at":"2026-10-29T13:06:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19659,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686603},"rest":"https://alion.io/mcp/rest/get_company?id=686603"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvaricent-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvaricent-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvaricent-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/varicent-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvaricent-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3195107}},{"tool":"search_jobs","arguments":{"company":"varicent.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3195107},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}