Vulnerability and Configuration Consultant in Ottawa

Job Description

Insight Global is looking for a Vulnerability and Configuration Consultant to join one of our largest banking clients on a 12-month remote contract to start. The successful candidate will be responsible for the following activities:

• Help create and implement an expanded configuration management program, building on the organization's existing vulnerability management capabilities.
• Extend configuration management and compliance practices beyond traditional server environments to include on-premises network devices and assets.
• Use Qualys to establish compliance checks and measure network-device configurations against defined security standards.
• Develop configuration and hardening baselines for network assets using CIS Benchmarks as the starting point, then customize those standards to align with the organization's environment.
• Build the organization's baseline playbook, documenting the configuration and hardening standards that network infrastructure teams will follow.
• Partner closely with the Network Infrastructure team to understand technical requirements, tooling constraints, and implementation considerations.
• Define measurable compliance standards that allow the organization to assess network devices against established baselines.
• Provide the standards, baselines, and compliance framework while working with the appropriate infrastructure teams to implement the required hardening changes.

Skills and Requirements

• 5+ years of experience in configuration management, vulnerability management, security compliance, or infrastructure hardening.
• Hands-on experience with Qualys, specifically Qualys Policy Compliance/Policy Audit (PA).
• Strong understanding of CIS Benchmarks and experience using CIS standards to develop and customize security configuration baselines for an organization's environment.
• Experience developing baseline playbooks and measurable compliance standards that can be implemented by infrastructure/network teams.
• Strong initiative and ability to take ownership of a program.
• Excellent collaboration and communication skills, with the ability to work closely with Network Infrastructure teams responsible for implementing remediation and hardening changes.
• Previous experience specifically creating security/configuration baselines for network devices.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.