At Varicent, we’re not just transforming the Sales Performance Management (SPM) market—we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, and G2. Our solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Here’s why you’ll thrive at Varicent:

Innovate with Purpose: Build impactful solutions for customers worldwide.
Join Excellence: Work in a diverse, collaborative, and innovative team.
Shape the Future: Lead in redefining revenue optimization.
Grow Together: Unlock your potential in a supportive environment.

Join us at Varicent—where your talent and ambition meet limitless opportunities for success!

The Opportunity

Varicent is looking for a hands-on Security Engineer to join our Information Security team on a 17-month contract and help strengthen the security of our systems, applications, and cloud environments.

This is a broad security engineering role for someone who enjoys being close to the technology while working across security operations, tooling, vulnerability management, incident response, and risk assessments. You’ll partner with Engineering, Cloud Operations, IT, and business teams to identify risks, improve security controls, and continuously strengthen how we protect our environment.

You’ll also have opportunities to work on emerging areas such as AI security, threat modeling, security automation, and integrating security testing into CI/CD pipelines.

What You’ll Do

Security Engineering & Tooling

Deploy, configure, monitor, and improve security technologies including SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, email security, and vulnerability scanning tools

Own and improve assigned security tools, including runbooks, workflows, documentation, and operational processes

Lead small-to-medium security initiatives from requirements and design through testing and implementation

Support security technology evaluations and proof-of-concepts

Security Monitoring & Incident Response

Investigate and triage security events across endpoint, cloud, network, application, and email environments

Support incident response investigations, root-cause analysis, escalation, and lessons learned

Identify opportunities to improve detection capabilities and reduce recurring security issues

Vulnerability Management & Security Testing

Support infrastructure, endpoint, and application vulnerability scanning, penetration-testing validation, and AI red-team testing

Validate and prioritize vulnerabilities and partner with technical teams to drive remediation

Coordinate rapid response to high-priority risks and zero-day vulnerabilities

Help integrate SAST, DAST, SCA, and external attack surface management into CI/CD workflows

Identify opportunities to automate repetitive security activities

Risk, Threat Modeling & AI Security

Conduct security risk assessments for internal initiatives, product changes, vendors, and productivity tools

Perform STRIDE-based threat modeling, including assessments of AI-enabled tools and applications

Evaluate AI and Agentic AI security risks and recommend practical mitigations

Support third-party risk assessments and workflows using OneTrust

What You’ll Bring

5+ years of experience in Information Security, Security Engineering, or Security Operations

Bachelor’s degree in Information Security, Computer Science, Computer Engineering, Technology Management, or equivalent practical experience

At least one relevant security certification, such as CISSP, CISA, CCSP, or equivalent

Hands-on experience with security technologies such as SIEM, EDR, WAF, DLP, and vulnerability scanning platforms