Job Title: Vulnerability Engineer
Job Location: Remote- Canada
** Please note, this role is not able to offer visa transfer or sponsorship now or in the future**
We are seeking a highly skilled Vulnerability Engineer to lead and execute enterprise vulnerability remediation initiatives across end-user computing platforms. The ideal candidate will possess strong expertise in vulnerability management, endpoint security, operating systems, and automation, with a focus on reducing security risk while maintaining platform stability and user experience.
This role will work closely with Cybersecurity, Engineering, Infrastructure, and Operations teams to identify, prioritize, remediate, and validate vulnerabilities across Windows, macOS, Citrix, Microsoft 365, Microsoft Teams, browsers, and other enterprise platforms. The successful candidate will also drive automation, operational excellence, and continuous security improvements across the environment.
In this role, you will
Execute and coordinate vulnerability remediation activities across Windows, macOS, Citrix, Microsoft Teams, Microsoft 365, web browsers, and other end-user computing platforms to mitigate security risks and maintain a secure enterprise environment.
Analyze vulnerability findings and implement appropriate remediation strategies, including security patches, configuration changes, and platform hardening measures.
Design, develop, and enhance automated remediation solutions to improve remediation speed, consistency, scalability, and operational efficiency.
Leverage SCCM/MECM and endpoint management tools to deploy, monitor, and validate security updates and remediation activities across enterprise endpoints.
Collaborate closely with Cybersecurity, Endpoint Engineering, Infrastructure, and Operations teams to ensure vulnerabilities are remediated within defined service level objectives (SLOs).
Test, validate, and verify remediation deployments to ensure successful implementation while minimizing disruption to platform stability and end-user experience.
Develop and maintain repeatable remediation processes, engineering standards, operational runbooks, technical documentation, and remediation procedures to support ongoing security operations.
Support response efforts for critical security incidents, zero-day threats, and high-priority vulnerabilities, ensuring timely and effective risk mitigation.
Monitor vulnerability remediation metrics, compliance status, and operational performance, identifying opportunities to improve automation, efficiency, and overall remediation effectiveness.
Drive continuous improvement initiatives focused on reducing technical debt, modernizing endpoint management capabilities, strengthening security controls, and improving the overall security posture of enterprise platforms.
What you’ll need to succeed (required skills)
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent industry experience.
7+ years of experience in Vulnerability Management, Endpoint Engineering, Security Operations, or Infrastructure Security.
7+ years of hands-on experience with Microsoft SCCM (Configuration Manager) and enterprise endpoint management.
Strong understanding of vulnerability management lifecycle, remediation methodologies, and security best practices.
Experience supporting enterprise-scale Windows and macOS environments.
Working knowledge of Citrix virtual desktop environments and Microsoft 365 ecosystem.
Experience implementing system hardening standards, security baselines, and configuration management controls.
Strong troubleshooting, analytical, and problem-solving skills.
Excellent verbal and written communication skills with the ability to work across multiple technical teams.
Technical Skills
Mandatory Skills
SCCM / Microsoft Endpoint Configuration Manager (MECM) – 7+ years
Vulnerability Management – 7+ years
Windows Endpoint Administration
macOS Administration
Microsoft 365 Security & Administration
Citrix Technologies
Security Patch Management
Endpoint Security & Platform Hardening
Preferred Skills
Microsoft Intune and Modern Endpoint Management
PowerShell, Python, or other automation scripting languages
Vulnerability scanning platforms such as Tenable, Qualys, Rapid7, or similar
Microsoft Defender Suite
Security Compliance Frameworks and Risk Management Practices
ITIL-based operational processes
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
Long-term/Short-term Disability
Paid Parental Leave
Work model:
At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance though our various wellbeing programs. Based on this role’s business requirements, it is a remote role in Canada.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
“Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
