Linux Security Engineer
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Partner with Linux and Platform Engineering teams to define and enforce hardening standards new Linux systems must enter the estate compliant from day one, not remediated after the fact
Own the Linux vulnerability lifecycle: triage findings from Qualys, prioritize by SLA, and work with the
Linux team to drive remediation through Puppet and Foreman
Track and report missed-target vulnerabilities across BTN and CMRI Linux estates; escalate with documented remediation or delegation plans per team ownership model
Validate configuration compliance against CIS benchmarks and security baselines; raise Puppet module gaps to Platform Engineering for remediation
Coordinate patching schedules and maintenance windows; ensure patch schedule adherence across the Linux estate
Support evaluation and adoption of ServiceNow as the unified patching orchestration layer, replacing manually-raised per-patch Jira change tickets with automated scheduled pipeline execution
Deploy and validate endpoint security agents (CrowdStrike/Falcon) across Linux hosts in partnership with the Linux teamContribute to bi-weekly vulnerability reporting for senior leadership"
Own the Linux vulnerability lifecycle: triage findings from Qualys, prioritize by SLA, and work with the
Linux team to drive remediation through Puppet and Foreman
Track and report missed-target vulnerabilities across BTN and CMRI Linux estates; escalate with documented remediation or delegation plans per team ownership model
Validate configuration compliance against CIS benchmarks and security baselines; raise Puppet module gaps to Platform Engineering for remediation
Coordinate patching schedules and maintenance windows; ensure patch schedule adherence across the Linux estate
Support evaluation and adoption of ServiceNow as the unified patching orchestration layer, replacing manually-raised per-patch Jira change tickets with automated scheduled pipeline execution
Deploy and validate endpoint security agents (CrowdStrike/Falcon) across Linux hosts in partnership with the Linux teamContribute to bi-weekly vulnerability reporting for senior leadership"
More about this job
Responsibilities
Define and enforce Linux hardening and security standards, manage vulnerability triage and remediation, and track compliance and patching across Linux estates. Support patching orchestration through ServiceNow, deploy endpoint security agents, and contribute to vulnerability reporting for senior leadership.
Requirements
The role calls for practical Linux security experience, including vulnerability lifecycle management, configuration compliance, patch coordination, and endpoint security deployment. It also requires collaboration with Linux and Platform Engineering teams and the ability to track remediation against SLAs and report outcomes.
Skills
- Linux Security
- Linux Hardening
- Vulnerability Management
- Qualys
- Puppet
- Foreman
- CIS Benchmarks
- Security Baselines
- Patch Management
- ServiceNow
- Jira
- CrowdStrike Falcon
- Configuration Compliance
- Vulnerability Reporting
- Remediation Planning
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Engineering
Keywords
- Linux
- Linux Security
- Platform Engineering
- Hardening Standards
- Vulnerability Lifecycle
- Qualys
- SLA
- Puppet
- Foreman
- BTN
- CMRI
- CIS Benchmarks
- Security Baselines
- Configuration Compliance
- Patch Management
- Maintenance Windows
- ServiceNow
- Jira
- Automated Pipelines
- CrowdStrike Falcon
- Endpoint Security
- Vulnerability Reporting
- Remediation Plans
- Linux Estate