Vulnerability Management Specialist (AI)

Location: Ottawa and Toronto, Canada — hybrid; other Canadian locations — remote.

Company

hirify.global develops an AI-infused supply chain orchestration platform used by more than 40,000 users in over 100 countries.

What you will do

• Administer, configure, tune, and maintain the enterprise vulnerability management platform across corporate and SaaS environments.
• Reconcile asset coverage with CMDB, cloud inventory, and EDR sources; onboard environments and automate scheduled and on-demand scans.
• Assess threat intelligence and vendor advisories, applying exploitability, CVSS, asset criticality, exposure, and business context to prioritize risk.
• Coordinate remediation with Corporate IT, Cloud Services, Product, and other teams; track tickets, SLAs, backlogs, blockers, exceptions, and critical vulnerabilities.
• Produce quarterly metrics and maintain vulnerability management procedures, runbooks, standards, remediation SLAs, and escalation paths.
• Design and operate approved AI-assisted workflows for vulnerability enrichment, prioritization, remediation guidance, and reporting, with human review and traceability.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Management Systems, or a similar field, or equivalent experience.
• 3–5 years of experience in IT Operations, IT Security, or a similar area, including a minimum of 2 years of hands-on enterprise vulnerability management experience.
• Ability to explain technical vulnerability risks and remediation guidance clearly and professionally to engineers, service owners, customers, and leadership.
• Understanding of vulnerability-management governance and control frameworks, including NIST CSF, NIST SP 800-40, NIST SP 800-53, ISO 27000 Series, CIS Controls, SOC 1/2, PCI-DSS, or FedRAMP.
• Ability to validate AI output against authoritative vulnerability, asset, and threat sources and apply human review, traceability, least-privilege, and sensitive-data controls.

Nice to have

• Experience in a high-tech, global organization.
• CompTIA Security+, CompTIA CySA+, or GIAC certification, such as GEVA or GCED.

Culture & Benefits

• Flexible work options, vacation, and company-wide hirify.global Days.
• Physical and mental well-being programs, including virtual fitness classes.
• Mentorship, training, career development, recognition, and referral programs.
• Inclusive hiring practices, accessibility accommodations, and a commitment to diversity, equity, inclusion, and sustainability.
• Participation in hackathons and work supporting global supply chains.