Post a job

Sr Subject Matter Expert (DFS)

On-site Canada

Job Summary

Job Summary : Vulnerability Disclosure Program (VDP) Operations • Manage VDP intake requests and operational ticket queues. • Facilitate case management between the bug bounty platform provider (YesWeHack) and business stakeholders. • Track vulnerability remediation activities through closure. • Coordinate follow-ups with application owners and business contacts. • Maintain operational dashboards and reporting metrics. • Ensure timely processing and governance of vulnerability submissions. Honeypot / Deception Technology Operations • Manage Canary/Honeypot-related service requests. • Perform platform monitoring and initial alert triage. • Execute approved administrative activities, including creation and modification of Canary configurations. • Support routine platform maintenance activities. • Coordinate customer requests related to deception technology services. • Escalate suspicious findings to the appropriate security teams for further investigation. Reporting & Service Administration • Coordinate daily operational activities. • Manage reporting and administration activities. • Support daily security insights, dashboards, and presentations. • Generate operational metrics, KPI reports, and service statistics. • Maintain SOPs, workflows, process documentation, and configuration records. • Ensure operational documentation remains current and audit ready. Stakeholder Coordination • Act as a liaison between business teams, security operations, and solution providers. • Facilitate communication for ticket resolution and service requests. • Coordinate remediation tracking and status reporting. • Participate in operational reviews and service governance discussions. Required Skills Security Operations • SOC Operations • Security Monitoring • Alert Triage • Incident Management • Vulnerability Management Concepts • Security Reporting Technical Skills • Bug Bounty / VDP Operations • YesWeHack, HackerOne, or similar platforms

Key Responsibilities

Job Summary : Vulnerability Disclosure Program (VDP) Operations • Manage VDP intake requests and operational ticket queues. • Facilitate case management between the bug bounty platform provider (YesWeHack) and business stakeholders. • Track vulnerability remediation activities through closure. • Coordinate follow-ups with application owners and business contacts. • Maintain operational dashboards and reporting metrics. • Ensure timely processing and governance of vulnerability submissions. Honeypot / Deception Technology Operations • Manage Canary/Honeypot-related service requests. • Perform platform monitoring and initial alert triage. • Execute approved administrative activities, including creation and modification of Canary configurations. • Support routine platform maintenance activities. • Coordinate customer requests related to deception technology services. • Escalate suspicious findings to the appropriate security teams for further investigation. Reporting & Service Administration • Coordinate daily operational activities. • Manage reporting and administration activities. • Support daily security insights, dashboards, and presentations. • Generate operational metrics, KPI reports, and service statistics. • Maintain SOPs, workflows, process documentation, and configuration records. • Ensure operational documentation remains current and audit ready. Stakeholder Coordination • Act as a liaison between business teams, security operations, and solution providers. • Facilitate communication for ticket resolution and service requests. • Coordinate remediation tracking and status reporting. • Participate in operational reviews and service governance discussions. Required Skills Security Operations • SOC Operations • Security Monitoring • Alert Triage • Incident Management • Vulnerability Management Concepts • Security Reporting Technical Skills • Bug Bounty / VDP Operations • YesWeHack, HackerOne, or similar platforms

Skill Requirements

Job Summary : Vulnerability Disclosure Program (VDP) Operations • Manage VDP intake requests and operational ticket queues. • Facilitate case management between the bug bounty platform provider (YesWeHack) and business stakeholders. • Track vulnerability remediation activities through closure. • Coordinate follow-ups with application owners and business contacts. • Maintain operational dashboards and reporting metrics. • Ensure timely processing and governance of vulnerability submissions. Honeypot / Deception Technology Operations • Manage Canary/Honeypot-related service requests. • Perform platform monitoring and initial alert triage. • Execute approved administrative activities, including creation and modification of Canary configurations. • Support routine platform maintenance activities. • Coordinate customer requests related to deception technology services. • Escalate suspicious findings to the appropriate security teams for further investigation. Reporting & Service Administration • Coordinate daily operational activities. • Manage reporting and administration activities. • Support daily security insights, dashboards, and presentations. • Generate operational metrics, KPI reports, and service statistics. • Maintain SOPs, workflows, process documentation, and configuration records. • Ensure operational documentation remains current and audit ready. Stakeholder Coordination • Act as a liaison between business teams, security operations, and solution providers. • Facilitate communication for ticket resolution and service requests. • Coordinate remediation tracking and status reporting. • Participate in operational reviews and service governance discussions. Required Skills Security Operations • SOC Operations • Security Monitoring • Alert Triage • Incident Management • Vulnerability Management Concepts • Security Reporting Technical Skills • Bug Bounty / VDP Operations • YesWeHack, HackerOne, or similar platforms

Other Requirements

NA

Source: the employer's careers page. Last checked 2026-10-26. Posted 2026-10-21.

Applications happen on HCLTech's own site. View role and apply

Get jobs like this by e-mailAt most one e-mail a day, only when something new matches. Unsubscribe in one click.

More from HCLTech

All jobs at HCLTech

Similar jobs in Canada

Hiring for a role like this? See how employers fill a role fast.