Threat and Vulnerability Management Analyst

Threat and Vulnerability Management Analyst

Skills: Cyber Security

Experience Required: 6–8 Years

Location: Brampton, ON – Hybrid (2–3 Days WFO)

Role Description

Responsibilities

• Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
• Configure, execute, and monitor vulnerability scans using tools such as Qualys VMDR, Tenable/Nessus, or equivalent platforms.
• Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
• Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
• Work with technology and application teams to coordinate and track vulnerability remediation activities.
• Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities.
• Support vulnerability exception/risk acceptance processes and maintain appropriate documentation.
• Generate vulnerability management dashboards, metrics, and executive-level reports.
• Investigate emerging vulnerabilities and assess their potential impact on the organization's technology environment.
• Support vulnerability assessments following major security advisories, zero-day vulnerabilities, and actively exploited vulnerabilities.
• Identify trends and recurring vulnerabilities and recommend improvements to reduce the organization's overall vulnerability exposure.
• Assist with vulnerability management process improvements, automation, and optimization of scanning coverage.
• Maintain accurate records of assets, vulnerabilities, remediation status, and exceptions.

Essential Skills

Required Skills & Experience

• 3+ years of experience in Vulnerability Management, Cybersecurity, Information Security, or a related discipline.
• Hands-on experience with one or more vulnerability management platforms, preferably:
• Qualys VMDR / Qualys Vulnerability Management
• Tenable Vulnerability Management / Nessus
• Rapid7 InsightVM or equivalent tools.
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
• Good knowledge of CVSS, CWE, CVE, CPE, vulnerability severity, and risk-based prioritization.
• Understanding of operating systems, networking, databases, web applications, and common enterprise infrastructure technologies.
• Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.
• Strong understanding of patch management and vulnerability remediation processes.
• Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.
• Strong communication, analytical, and stakeholder-management skills.

Preferred Qualifications

• Experience with vulnerability management across on-premises, cloud, and hybrid environments.
• Knowledge of AWS/Azure/GCP security and cloud vulnerability management.
• Familiarity with CISA KEV, threat intelligence, and actively exploited vulnerabilities.
• Experience with vulnerability remediation tracking and security dashboards.
• Exposure to scripting/automation using Python, PowerShell, or similar technologies.