Hybrid Staff Cyber Threat Exposure Management Engineer

at Manulife

• Job title: Staff Cyber Threat Exposure Management Engineer
• Job type: Full Time
• Experience level: Lead
• Salary: CA$109,600 - CA$159,600 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security
• Location requirements: Hybrid, Waterloo, Canada

About the role

• Security Analyst in cybersecurity at Manulife focusing on vulnerability management and risk-based decision-making. Requires experience with tools like Avalor, Qualys, and Tenable, working in a hybrid model.

Responsibilities

• Lead the CTEM lifecycle, including identification, assessment, prioritization, and help inform remediation tracking and reporting
• Utilize tools like Avalor to perform scans and interpret results beyond surface-level findings
• Inform and help maintain risk-based prioritization frameworks to ensure the most critical threats are addressed first
• Translate technical vulnerabilities into business risk language for executive and stakeholder reporting
• Experience working with API’s and multiple data sources and ingesting and deconflicting those data sources into a singular view
• Platform orchestration and automation experience is also highly desirable in this role
• Monitor threat intelligence feeds and correlate with internal vulnerabilities to assess potential impact
• Contribute to the development of metrics and dashboards to track vulnerability trends, configuration weakness trends, along with remediation effectiveness
• Act as the bridge between the CTEM program at Manulife and the cyber security teams and infrastructure management teams
• Stay current with emerging threats, vulnerabilities, and regulatory requirements.

Requirements

• At least 7 years IT industry experience
• 3–5+ years of experience in cybersecurity, with a focus on vulnerability management and threat analysis
• Exposure and experience with the Avalor product line from Zscaler is highly desirable for this position
• Experience with Qualys or similar vulnerability scanning platforms
• Demonstrated ability to think strategically and prioritize risks in complex environments
• Familiarity with CVSS scoring, MITRE ATT&CK, and risk management frameworks
• Experience with SIEM, threat intelligence platforms, and asset management tools is a plus
• Excellent communication skills, with the ability to convey technical concepts to non-technical audiences.

Benefits

• health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage
• adoption/surrogacy and wellness benefits
• employee/family assistance plans
• various retirement savings plans (including pension and a global share ownership plan with employer matching contributions)
• financial education and counseling resources
• generous paid time off program including holidays, vacation, personal, and sick days
• full range of statutory leaves of absence