Vulnerability/Application Engineer 7+ years of experience
- Quebec, QC, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
The client is looking for a senior developer to speed up the fixing of vulnerabilities as part of reducing technological risk in their main department. The role covers three layers at once: application code, Windows and Linux operating systems, and services hosted in AWS. Document production solutions (Exstream, Kofax, Output Manager, PIOE) are within the scope to be fixed, even though they are not part of the requested qualifications. Monitoring is done via the ArmorCode dashboard, and the person guides the relevant teams toward structured handling, which relies on influence rather than hierarchical authority. The combination of development, infrastructure, and cloud, on a short-term assignment, limits the candidate pool.
A senior developer or technical specialist who has personally fixed vulnerabilities in Java code, on Windows and Linux servers, and in AWS, and who prioritizes based on criticality. This person moves from layer to layer without handoffs and gets the responsible teams to take action.
Key Requirements:
- Vulnerability analysis and remediation (code, dependencies, operating systems, images, configurations)
- Severity interpretation, technical risk assessment, and corrective measures
- Java and Ruby software development, including secure development practices
- Windows and Linux environments (administration, configuration, hardening, patching)
- AWS: core services, security models, cloud vulnerability management
- ArmorCode or equivalent vulnerability management and orchestration platform
- End-to-end involvement across application, cloud, and infrastructure layers, and stakeholder coordination
- Influential leadership, autonomy, problem-solving, communication, and the ability to explain complex concepts clearly
More about this job
Responsibilities
Analyze and remediate vulnerabilities across application code, dependencies, Windows and Linux systems, and AWS-hosted services, prioritizing work by severity and technical risk. Use the ArmorCode dashboard to guide responsible teams toward structured remediation, coordinating across technical layers through influence rather than hierarchical authority.
Requirements
The role requires 7+ years of experience and hands-on vulnerability remediation across Java and Ruby applications, Windows and Linux environments, and AWS. Candidates should be able to assess severity and risk, recommend corrective actions, use ArmorCode or an equivalent platform, and coordinate effectively across teams.
Skills
- Vulnerability Analysis
- Vulnerability Remediation
- Java
- Ruby
- Secure Development
- Windows Administration
- Linux Administration
- System Hardening
- Patch Management
- AWS
- Cloud Security
- ArmorCode
- Technical Risk Assessment
- Stakeholder Coordination
- Influential Leadership
- Communication
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Software
- Security & Safety
- Engineering
Keywords
- Vulnerability Analysis
- Vulnerability Remediation
- Application Security
- Java
- Ruby
- Secure Development
- Windows
- Linux
- AWS
- Cloud Security
- Operating System Hardening
- Patch Management
- Dependency Management
- Container Images
- Configuration Security
- ArmorCode
- Vulnerability Management
- Security Orchestration
- Severity Assessment
- Technical Risk Assessment
- Corrective Measures
- Stakeholder Coordination
- Influential Leadership
- Exstream
- Kofax
- Output Manager
- PIOE