--- title: 'Security Engineering Manager at Varicent' canonical: 'https://feeny.ai/job/security-engineering-manager-varicent-toronto-1ahfpmvywzgt' type: 'job' last_seen: '2026-10-25' --- # Security Engineering Manager at Varicent - **Company:** Varicent - **Location:** Toronto, Canada - **Work type:** remote - **Posted:** 2026-10-19 - **Last confirmed live:** 2026-10-25 - **Apply:** https://job-boards.greenhouse.io/varicent/jobs/5457451008 ## Job description At Varicent, we’re not just transforming the Sales Performance Management (SPM) market—we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, and G2. Our solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Here’s why you’ll thrive at Varicent: - Innovate with Purpose: Build impactful solutions for customers worldwide. - Join Excellence: Work in a diverse, collaborative, and innovative team. - Shape the Future: Lead in redefining revenue optimization. - Grow Together: Unlock your potential in a supportive environment. Join us at Varicent—where your talent and ambition meet limitless opportunities for success! Primary Purpose Our Information Security team is seeking an experienced, hands-on Security Engineering Manager to lead the health, performance, and continuous improvement of our security tooling ecosystem and own the maturity of our Incident Response program. This is an individual contributor role with no direct reports. The position focuses on technical leadership, security program ownership, and managing external security vendors and service providers rather than directly managing an internal team. This role owns complex, cross-functional problems, including shaping how we secure user devices at scale, driving the performance of our Managed Detection and Response (MDR) partner, and ensuring the organization is prepared to respond to significant security events. You will work closely with stakeholders across IT, Engineering, Cloud Operations, and business leadership to define and execute the endpoint security program roadmap, hold vendors accountable to defined service levels, and build organizational readiness through tabletop exercises, playbooks, and clear incident response procedures. ## Key Responsibilities ## What You Will Do Endpoint Security Program Execution & Operations - Lead the healthy functioning of the security stack across endpoints, including EDR, DLP, ZTNA, PAM, and EPM, and drive continuous policy improvements across each. - Further mature and track health metrics for each tool (agent coverage, policy drift, false-positive rates) and report on them to leadership. - Own the roadmap, as Service Owner, for tooling upgrades, migrations, and consolidation, coordinating with vendors and internal stakeholders. - Continue to mature and maintain playbooks, security architecture documentation, and standard operating procedures for the tooling under your ownership as Service Owner. - Evaluate emerging tooling capabilities and threats, and recommend changes to strategy and standards accordingly. - Administer and maintain ZTNA, DLP, EDR, and PAM policies, ensuring new policies are developed, tested, and rolled out without impact to end users or the business. Managed Detection & Response (MDR) Vendor Oversight - Own the relationship with and performance management of Varicent's MDR vendor. - Oversee vendor performance on Tier 1 and Tier 2 alert triage and deep investigation, holding the vendor accountable for quality, timeliness, and depth of analysis. - Review vendor SLAs, escalation quality, and detection coverage on an ongoing basis; drive corrective action plans where performance gaps are identified. - Coordinate Tier 3 remediation activities across Varicent, partnering with IT, Engineering, and Cloud Operations to ensure timely closure. - Serve as the primary internal escalation point for significant or ambiguous alerts requiring cross-functional coordination. Incident Response Leadership - Own Incident Response processes, procedures, and playbooks end to end, ensuring they reflect current threats, tooling, and organizational structure. - Draft, lead, and execute required tabletop exercises annually, including scenario design, facilitation, and after-action reporting. - Drive continuous improvement of Incident Response readiness based on tabletop outcomes, real incidents, and industry lessons learned. - Act as a senior escalation point or incident lead during significant security events, coordinating cross-functional response. Vendor & Cross-Functional Leadership - Coordinate day-to-day security activities with IT analysts, external vendors, managed service providers, and contractors supporting endpoint security operations and incident response. - Provide technical guidance and oversight to external service providers, ensuring alignment with security requirements, operational priorities, and service expectations. - Influence peers and cross-functional partners across IT, Engineering, Cloud Operations, Legal, and Communications to align on security priorities and incident response commitments. - Share technical expertise and best practices with security engineers and cross-functional stakeholders without direct people-management responsibilities. - Communicate tooling health, vendor performance, and incident readiness to leadership through clear, risk-based reporting. Continuous Improvement & Risk-Based Decision Making - Frame ambiguous, cross-functional problems related to endpoint security and incident readiness, and propose approaches rather than waiting for direction. - Continuously identify opportunities to mature processes, strengthen controls, and improve security outcomes across teams by coordinating engagements with offensive security engineers. - Stay current on the evolving threat landscape and detection/response best practices; share relevant learnings with the broader team. Knowledge, Skills & Experience ## What You Will Bring Required Experience - Bachelor's degree in Computer Science, Information Security, Information Technology, or equivalent experience. - Minimum of 8 years of related experience in Security Engineering, Security Operations, or Incident Response; or 6 years with a Master's degree; or an equivalent combination of education and experience. - At least one relevant information security certification (e.g., CISSP, CCSP, CISA, GCIH, GCIA, or equivalent). - Hands-on experience administering and improving endpoint security tools such as EDR, DLP, ZTNA, PAM, and EPM platforms, following the ITIL framework as a Service Owner delivering continuous service improvements. - Experience installing security agents and supporting IT teams with deployments through Intune, JAMF, and MDM. - Demonstrated experience managing or overseeing third-party security vendors (e.g., MDR, MSSP) and holding them accountable to defined SLAs. - Experience owning or significantly contributing to an organization's Incident Response program, including playbooks, procedures, and tabletop exercises. - Strong understanding of security standards and frameworks (e.g., NIST CSF, NIST 800-61, ISO 27001/27002). - Excellent written and verbal communication skills, with the ability to translate technical risk into business terms for leadership. - Proven ability to operate with significant autonomy on complex, ambiguous problems and coordinate work across internal teams and external service providers. - English proficiency is required. ## Preferred Experience - Experience providing technical leadership or coordinating security operations across internal teams, external vendors, or managed service providers without direct people-management responsibilities. - Experience with security automation and orchestration (SOAR) to streamline alert triage and remediation workflows. Experience using AI for automation is a plus. - Familiarity with regulatory and compliance frameworks relevant to Varicent's business (e.g., SOC 2, PCI, HIPAA). - Experience building or maturing an endpoint security program with a service management mindset. - Background in cloud security across major platforms (e.g., AWS, Azure Entra, and MDM). Success Expectations Short-Term (1–3 Months): Assess and Stabilize - Develop a full understanding of the current security tooling stack, MDR vendor relationship, and existing Incident Response playbooks. - Establish baseline health metrics and SLAs for each tool and the MDR vendor. - Identify immediate gaps in tooling coverage, policy configuration, or vendor performance. Mid-Term (4–6 Months): Improve and Lead - Drive at least one significant tooling improvement or policy hardening initiative to completion. - Implement a formal vendor performance review cadence with the MDR provider, with clear corrective actions where needed. - Design and lead Varicent's annual tabletop exercise, including scenario development and after-action reporting. - Refine Incident Response playbooks and procedures based on findings from the tabletop exercise and any real incidents. Long-Term (7+ Months): Own and Mature - Demonstrate measurable improvement in tooling health metrics, vendor SLA performance, and incident response readiness. - Establish a security tooling roadmap that anticipates emerging threats and business needs. - Become the primary technical point of contact for endpoint security tooling strategy, vendor performance, and incident response across Varicent. ## Compensation For this role, the estimated annual base salary range is between CAD $151,200 and CAD $187,200. In addition to base salary, our compensation package may include bonuses, commissions for eligible sales roles, and a comprehensive benefits package. The actual base salary will vary based on factors including individual qualifications and market data, as objectively assessed during the interview process. Vacancy & Hiring Process This posting is for a new vacancy. This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement — not replace — human decision-making. ## Overview of Benefits - Health & Wellness— Comprehensive medical, dental, and vision coverage tailored to your local needs - Time Off— PTO and public holidays to rest, recharge, and do what matters most - Volunteer Days— Dedicated time to give back and support the communities that matter to you - Ignite Days— Dedicated learning days to support continuous growth, skill development, and professional learning - Financial— Compensation that reflects your market and your value - Retirement— Retirement plans designed to help you build long-term financial security - Tuition Assistance— Invest in your growth with support for continuing education and professional development - Flexibility— Work where you thrive, with remote and hybrid options available across most regions Varicent is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you require accommodation at any time during the recruitment process please email accomodations@varicent.com Varicent is also committed to compliance with all fair employment practices regarding citizenship and immigration status. By applying for a position at Varicent and/or by using this portal, you declare and confirm that you have read and agree to our[Job Applicant Privacy Notice](https://www.varicent.com/recruitment-portal-privacy-notice) and that the information provided by you as part of your application is true and complete and includes no misrepresentation or material omission of fact ## About Varicent ## Company Overview - **One-liner**: Varicent provides a comprehensive SaaS platform for sales performance management, enabling revenue leaders to plan, execute, and optimize go-to-market strategies using GenAI-powered insights. - **Entity Type**: Private (divested from IBM in 2020, now independently owned) - **Headquarters**: Toronto, Ontario, Canada (with offices in the United States, London, and Bucharest) - **Founded**: 2005 - **Founders**: Not publicly disclosed ## Core Business - **Primary industries**: Sales Performance Management (SPM), Revenue Performance Management, Enterprise SaaS - **Target customers**: B2B, enterprise organizations with large sales teams (100,000+ payees managed) - **Mission**: “Own Your Revenue Growth” – help revenue leaders drive growth through connected planning, incentives, and AI-driven execution ## Products & Services - **Varicent Incentives**: Design and manage variable compensation plans that align seller behavior with revenue strategy. - **Varicent Sales Planning**: Balance territories, optimize quotas, and model capacity to turn strategy into performance. - **Varicent GenAI**: AI-powered insights embedded across the platform to build quotas, territories, and plans that adapt to shifting priorities. - **Varicent Concert** (acquired): Expanded portfolio for revenue orchestration. - **Symon.AI** (acquired): AI technology that accelerated market disruption. ## Market Standing - **Valuation/Market Cap**: Not disclosed (private company) - **Key Metric**: 700+ employees (up from ~120 at divestiture in 2020); 100,000+ payees managed worldwide - **Notable Investors/Partners**: Previously owned by IBM; current investors not publicly listed. Trusted by brands such as T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody’s, and Stryker. - **Growth Signals**: Recognized as a market leader in the 2023 Forrester Wave for SPM, 2023 Ventana Research RPM Value Index, Gartner Peer Insights, and 2024 Gartner SPM Market Guide. Rapid headcount growth and strategic acquisitions (Symon.AI, Varicent Concert). ## Competitive Advantages - **Unified platform**: Single, connected system for quotas, territories, comp, and capacity – eliminating silos. - **GenAI at the core**: AI-driven planning and insights that adapt in real time, recovering revenue lost by traditional plans. - **Proven scale**: Manages over 100,000 payees for some of the world’s largest enterprises. - **Deep domain expertise**: 20+ years focused exclusively on sales performance management. ## Strategic Focus - **GenAI expansion**: Embedding generative AI into every module to automate planning, provide predictive insights, and increase seller productivity. - **Revenue orchestration**: Moving beyond SPM to a full revenue lifecycle platform (plan, execute, grow). - **Global growth**: Expanding headcount and customer base across five global regions. ## Why Work Here - **Work-life balance**: Generous time off (including your birthday), remote/hybrid options, flexible hours, and no-meeting days. - **Professional development**: Tuition reimbursement, “Ignite Days” (quarterly learning time), and continuous growth opportunities. - **Health & wellness**: Virtual healthcare, mental health support, and Employee and Family Assistance Program. - **Inclusion**: Strategic inclusion groups that drive impact and remove barriers; paid volunteer hours and donation matching. - **Culture**: Connected, innovative, and collaborative – regular team events (in-person and virtual), post-work socials, and community giving. - **Global & remote-friendly**: Offices in Toronto, US, London, and Bucharest; many roles are remote-friendly (see current openings for Canada, Mexico, UK, etc.). ## Sources 1. [varicent.com](https://www.varicent.com/) – Main site, product overview, growth story 2. [varicent.com/company](https://www.varicent.com/company) – About Us, leadership, journey, values 3. [varicent.com/company/careers](https://www.varicent.com/company/careers) – Careers page, benefits, culture 4. [job-boards.greenhouse.io/varicent](http://job-boards.greenhouse.io/varicent) – Current job openings (64 roles) 5. [linkedin.com/company/varicent](https://www.linkedin.com/company/varicent) – LinkedIn company page ## Other roles at Varicent - [Security Engineer](https://feeny.ai/job/security-engineer-varicent-toronto-9y4mx4cd61n3) — Toronto, Canada - [Director, Offensive Security](https://feeny.ai/job/director-offensive-security-varicent-toronto-64m1pn9cyxe2) — Toronto, Canada - [Senior Integrated Campaigns Manager](https://feeny.ai/job/senior-integrated-campaigns-manager-varicent-ottawa-jf36570vdyzp) — Ottawa, Canada - [Senior Customer Marketing Manager](https://feeny.ai/job/senior-customer-marketing-manager-varicent-vancouver-1h04ag30q7wz) — Vancouver, Canada - [Payroll & Benefits Specialist](https://feeny.ai/job/payroll-benefits-specialist-varicent-toronto-07c8pkbacsgn) — Toronto, Canada - [Product Trainer, Customer Education](https://feeny.ai/job/product-trainer-customer-education-varicent-vancouver-pnr5w62643ya) — Vancouver, Canada - [Customer Education Trainer (Virtual, SaaS)](https://feeny.ai/job/customer-education-trainer-virtual-saas-varicent-toronto-v0528trk0vr5) — Toronto, Canada - [Director Financial Reporting (Mat Leave Coverage)](https://feeny.ai/job/director-financial-reporting-mat-leave-coverage-varicent-toronto-ghk1nsbngeh7) — Toronto, Canada - [Sourcing and Procurement Lead](https://feeny.ai/job/sourcing-and-procurement-lead-varicent-toronto-ybsqer2vtqf2) — Toronto, Canada - [Senior Campaign Manager (20 Month Contract)](https://feeny.ai/job/senior-campaign-manager-20-month-contract-varicent-toronto-b88bse17r1p6) — Toronto, Canada