Security Engineer

At Varicent, We’re Not Just Transforming The Sales Performance Management (SPM) Market—we’re Redefining How Organizations Achieve Revenue Success. Our Cutting-edge SaaS Solutions Empower Revenue Leaders Globally To Design Smarter Go-to-market Strategies, Maximize Seller Performance, And Unlock Untapped Potential. Varicent Stands At The Forefront Of Innovation, Celebrated As a Market Leader In The 2025 Forrester Wave Report For SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, And G2.

Our Solutions Are Trusted By a Diverse Range Of Global Industry Leaders Like T-Mobile, Service Now, Wawanesa Bank, Shaw Industries, Moody's, Stryker And Hundreds More. Here’s Why You’ll Thrive At Varicent.

• Innovate with
  
  Purpose:
  
  Build impactful solutions for customers worldwide.
• Join Excellence:
  Work in a diverse, collaborative, and innovative team.
• Shape the Future:
  Lead in redefining revenue optimization.
• Grow Together:
  Unlock your potential in a supportive environment.

Join us at Varicent—where your talent and ambition meet limitless opportunities for success!

Our Information Security team is looking for a motivated, hands‑on Security Engineer I in Canada to support the execution of day‑to‑day security operations while contributing to foundational security engineering initiatives. This role provides exposure across multiple security domains, including security monitoring and incident response, security tooling and controls engineering, application security testing, vulnerability management, security risk assessments, and emerging AI security practices.

Contract Length: 18 Months (Maternity Leave Backfill) Only Candidates residing in Canada

• Coordinate the deployment, configuration, testing, monitoring, and ongoing maintenance of security technologies, including SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, URL filtering, email security, and application/vulnerability scanning platforms.
• Lead small-to-medium-sized security initiatives from requirements gathering through design, testing, pilot execution, and implementation.
• Support proof‑of‑concept evaluations and product assessments to ensure proposed solutions align with security strategy, standards, and industry best practices.
• Act as a service or tool owner by identifying enhancements, maintaining operational runbooks, and recommending improvements for tools under your responsibility.
• Develop and maintain procedures, workflows, architecture diagrams, and operational playbooks that support security monitoring and engineering activities.

• Investigate and triage security events using technologies such as SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, and email security solutions.
• Detect, respond to, and support investigations of security incidents while documenting root‑cause analysis and lessons learned.
• Follow established incident response procedures and playbooks, escalating critical findings appropriately and efficiently.
• Apply analytical and adversarial thinking to identify, protect, detect, respond to, and recover from common cyber threats and attack vectors.

• Perform and support secure baseline reviews, infrastructure scanning, endpoint scanning, application vulnerability assessments, penetration testing validation, and AI red‑teaming exercises.
• Review vulnerability findings for accuracy and completeness while partnering with stakeholders to prioritize remediation efforts based on risk.
• Escalate critical vulnerabilities, zero‑day threats, and high‑priority risks while supporting rapid mitigation efforts.
• Contribute to continuous improvements in vulnerability management workflows through automation and the integration of security testing into CI/CD pipelines.

• Conduct security risk assessments for internal initiatives, product enhancements, vendors, and productivity tools.
• Perform STRIDE-based threat modeling for…