Role: Vulnerability Management Senior Analyst

Location: Calgary, AB – Hybrid

Contract Role

Role Descriptions:

Required Technical Skill Set

- Vulnerability lifecycle management (identify → assess → prioritize → remediate → verify)
- Risk-based prioritization
- Patch management processes and coordination
- Remediation validation and reporting
- False positive analysis and tuning
- SLA tracking and compliance alignment
- Penetration testing basics
- Hands-on experience in Rapid7, MCAS, Wiz.

Must-Have

Monitor threat intelligence and vendor advisories.

- Analyze vulnerabilities affecting ICS (Industrial Control Systems)
- Analyze and Conduct vulnerability assessments for ICS devices
- Coordinate activities between OT, IT, cybersecurity, and operations teams
- Conducted regular vulnerability scans across network, systems, and applications using tools such as Tenable, Qualys, and Rapid7, identifying critical security gaps.
- Managed the end-to-end vulnerability lifecycle including identification, assessment, prioritization, remediation, and validation.
- Partnered with security operations and incident response teams to address actively exploited vulnerabilities and reduce attack surface.




- Delivered continuous improvement initiatives to enhance scanning coverage, reduce MTTR, and strengthen overall security posture.
- Performed risk-based prioritization using threat intelligence, and business impact to focus remediation on high-risk vulnerabilities.
- Drive timely remediation and patch management, ensuring SLA adherence.
- Validated remediation efforts through re-scans and manual verification, reducing false positives and ensuring accurate closure.
- Analyzed vulnerability data and generated actionable reports and dashboards for technical teams and executive stakeholders.
- Leveraged automation using Python/PowerShell and APIs to streamline vulnerability scanning, reporting, and remediation workflows.
- Monitored emerging threats using CVE, and threat intelligence feeds, correlating exploitability with organizational risk.
- Ensured compliance with industry standards and frameworks such as NIST, CIS Benchmarks, ISO 27001, and PCI-DSS.

Good-to-Have

- Experience in dealing with customers directly and working in a global delivery model.
- Negotiation Skills
- Positive Assertive Communication (Written & Oral)
- External certifications any

📌 Vulnerability Management Analyst (Alberta)
🏢 apptoza
📍 Alberta