Opens LinkedIn
- Employment type
- Full-time
- Experience level
- Senior · 5+ years
- Apply by
- Apr 19, 2027
- Posting language
- English
- Working hours
- 40 hours per week
- Seniority
- Associate
- Application method
- Direct apply is available
Job summary
Establish or contribute to continuous threat exposure and vulnerability management programs, prioritizing and mitigating security exposures according to organizational risk. Integrate security into CI/CD and cloud-native environments, operate CSPM or CNAPP platforms, and align cloud security initiatives with the broader security and compliance program.
Job details
Required Experience Continuous Threat Exposure Management (CTEM) Experience : Demonstrated experience establishing or significantly contributing to a CTEM or continuous vulnerability management program. Hands-on experience running programs that continuously identify and mitigate security exposures, aligning closely with organizational risk tolerance. Perform risk-based analysis and prioritization, evaluating where to focus security resources for maximum impact and articulating the rationale to stakeholders. DevSecOps & Application Security Experience: Hands-on experience integrating security into CI/CD pipelines (implementing SAST, DAST, container security, etc.). Experience collaborating with development/DevOps teams to remediate security issues and improve secure coding practices. Familiarity with infrastructure-as-code (IaC) and managing security in containerized or cloud-native application environments. Cloud Security & CSPM Operations : Strong experience with AWS and Azure security controls and best practices. Proven operation of a CSPM or CNAPP platform (e.g., configuring rules, analyzing findings, managing remediation workflows). Ability to align cloud security initiatives with overall security program and compliance requirements.
What you’ll do
Establish or contribute to continuous threat exposure and vulnerability management programs, prioritizing and mitigating security exposures according to organizational risk. Integrate security into CI/CD and cloud-native environments, operate CSPM or CNAPP platforms, and align cloud security initiatives with the broader security and compliance program.
Requirements
Requires hands-on experience with CTEM or continuous vulnerability management, risk-based prioritization, and integrating security into CI/CD pipelines in collaboration with development and DevOps teams. Candidates should have strong AWS and Azure security experience, CSPM or CNAPP operations experience, and familiarity with infrastructure as code and containerized or cloud-native environments.
Listed skills
- management · Preferred
- CI/CD · Preferred
- Compliance · Preferred
- Amazon Web Services · Preferred
- Microsoft Azure · Preferred
- Development · Preferred
- Prioritization · Preferred
- analysis · Preferred
- Collaboration · Preferred
- Teams · Preferred
- Problem solving · Preferred
Other relevant skills
Identified from the job description. Confirm important requirements above.
- Continuous Threat Exposure Management
- Vulnerability Management
- Risk-Based Analysis
- DevSecOps
- Application Security
- CI/CD Security
- SAST
- DAST
- Container Security
- Secure Coding
- Infrastructure as Code
- AWS Security
- Azure Security
- CSPM
- CNAPP
- Cloud Security
Job areas
- Security & Safety
- Technology
- Software
More jobs from J&M Group
Databricks Architect
- On-site
- Posted Oct 22, 2026
Sr. Software Developer
- On-site
- Posted Oct 22, 2026
Sr Fullstack Developer
- On-site
- Toronto, ON
- Posted Oct 22, 2026
Salesforce Revenue Cloud Architect
- On-site
- Toronto, ON
- Posted Oct 22, 2026
