Threat and Vulnerability Management Analyst

Threat and Vulnerability Management Analyst

Skills: Cyber Security

Experience Required: 68 Years

Location: Brampton ON Hybrid (23 Days WFO)

Role Description

Responsibilities

• Perform day-to-day vulnerability management activities across infrastructure endpoints servers network devices applications and cloud environments.
  
• Configure execute and monitor vulnerability scans using tools such as Qualys VMDR Tenable/Nessus or equivalent platforms.
  
• Analyze vulnerability scan results validate findings eliminate false positives and assess associated security risks.
  
• Prioritize vulnerabilities based on severity exploitability asset criticality exposure and business impact.
  
• Work with technology and application teams to coordinate and track vulnerability remediation activities.
  
• Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities.
  
• Support vulnerability exception/risk acceptance processes and maintain appropriate documentation.
  
• Generate vulnerability management dashboards metrics and executive-level reports.
  
• Investigate emerging vulnerabilities and assess their potential impact on the organizations technology environment.
  
• Support vulnerability assessments following major security advisories zero-day vulnerabilities and actively exploited vulnerabilities.
  
• Identify trends and recurring vulnerabilities and recommend improvements to reduce the organizations overall vulnerability exposure.
  
• Assist with vulnerability management process improvements automation and optimization of scanning coverage.
  
• Maintain accurate records of assets vulnerabilities remediation status and exceptions.
  

Essential Skills

Required Skills & Experience

• 3 years of experience in Vulnerability Management Cybersecurity Information Security or a related discipline.
  
• Hands-on experience with one or more vulnerability management platforms preferably:
  
  • Qualys VMDR / Qualys Vulnerability Management
    
  • Tenable Vulnerability Management / Nessus
    
  • Rapid7 InsightVM or equivalent tools.
    
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
  
• Good knowledge of CVSS CWE CVE CPE vulnerability severity and risk-based prioritization.
  
• Understanding of operating systems networking databases web applications and common enterprise infrastructure technologies.
  
• Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.
  
• Strong understanding of patch management and vulnerability remediation processes.
  
• Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.
  
• Strong communication analytical and stakeholder-management skills.
  

Preferred Qualifications

• Experience with vulnerability management across on-premises cloud and hybrid environments.
  
• Knowledge of AWS/Azure/GCP security and cloud vulnerability management.
  
• Familiarity with CISA KEV threat intelligence and actively exploited vulnerabilities.
  
• Experience with vulnerability remediation tracking and security dashboards.
  
• Exposure to scripting/automation using Python PowerShell or similar technologies.