Threat and Vulnerability Management Analyst

Threat and Vulnerability Management Analyst

Skills: Cyber Security

Experience Required: 6–8 Years

Location: Brampton, ON – Hybrid (2–3 Days WFO)

Role Description

Responsibilities

• Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
  
• Configure, execute, and monitor vulnerability scans using tools such as Qualys VMDR, Tenable/Nessus, or equivalent platforms.
  
• Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
  
• Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
  
• Work with technology and application teams to coordinate and track vulnerability remediation activities.
  
• Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities.
  
• Support vulnerability exception/risk acceptance processes and maintain appropriate documentation.
  
• Generate vulnerability management dashboards, metrics, and executive-level reports.
  
• Investigate emerging vulnerabilities and assess their potential impact on the organization's technology environment.
  
• Support vulnerability assessments following major security advisories, zero-day vulnerabilities, and actively exploited vulnerabilities.
  
• Identify trends and recurring vulnerabilities and recommend improvements to reduce the organization's overall vulnerability exposure.
  
• Assist with vulnerability management process improvements, automation, and optimization of scanning coverage.
  
• Maintain accurate records of assets, vulnerabilities, remediation status, and exceptions.
  

Essential Skills

Required Skills & Experience

• 3+ years of experience in Vulnerability Management, Cybersecurity, Information Security, or a related discipline.
  
• Hands-on experience with one or more vulnerability management platforms, preferably:
  
  • Qualys VMDR / Qualys Vulnerability Management
    
  • Tenable Vulnerability Management / Nessus
    
  • Rapid7 InsightVM or equivalent tools.
    
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
  
• Good knowledge of CVSS, CWE, CVE, CPE, vulnerability severity, and risk-based prioritization.
  
• Understanding of operating systems, networking, databases, web applications, and common enterprise infrastructure technologies.
  
• Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.
  
• Strong understanding of patch management and vulnerability remediation processes.
  
• Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.
  
• Strong communication, analytical, and stakeholder-management skills.
  

Preferred Qualifications

• Experience with vulnerability management across on-premises, cloud, and hybrid environments.
  
• Knowledge of AWS/Azure/GCP security and cloud vulnerability management.
  
• Familiarity with CISA KEV, threat intelligence, and actively exploited vulnerabilities.
  
• Experience with vulnerability remediation tracking and security dashboards.
  
• Exposure to scripting/automation using Python, PowerShell, or similar technologies.