Vulnerability Management Senior Analyst – Rapid7, Wiz, MCAS & ICS Security

Location: Calgary - 4 days WFO

Hybrid

Required Technical Skill Set

- Vulnerability lifecycle management (identify → assess → prioritize → remediate → verify)
- Risk-based prioritization
- Patch management processes and coordination
- Remediation validation and reporting
- False positive analysis and tuning
- SLA tracking and compliance alignment
- Penetration testing basics
- Hands-on experience in Rapid7, MCAS, Wiz.

Must-Have

- Monitor threat intelligence and vendor advisories.
- Analyze vulnerabilities affecting ICS (Industrial Control Systems).
- Analyze and Conduct vulnerability assessments for ICS devices.
- Coordinate activities between OT, IT, cybersecurity, and operations teams.
- Conducted regular vulnerability scans across network, systems, and applications using tools such as Tenable, Qualys, and Rapid7, identifying critical security gaps.
- Managed the end-to-end vulnerability lifecycle including identification, assessment, prioritization, remediation, and validation.
- Partnered with security operations and incident response teams to address actively exploited vulnerabilities and reduce attack surface.




- Delivered continuous improvement initiatives to enhance scanning coverage, reduce MTTR, and strengthen overall security posture.
- Performed risk-based prioritization using threat intelligence and business impact to focus remediation on high-risk vulnerabilities.
- Drive timely remediation and patch management, ensuring SLA adherence.
- Validated remediation efforts through re-scans and manual verification, reducing false positives and ensuring accurate closure.
- Analyzed vulnerability data and generated actionable reports and dashboards for technical teams and executive stakeholders.
- Leveraged automation using Python/PowerShell and APIs to streamline vulnerability scanning, reporting, and remediation workflows.
- Monitored emerging threats using CVE and threat intelligence feeds, correlating exploitability with organizational risk.
- Ensured compliance with industry standards and frameworks such as NIST, CIS Benchmarks, ISO 27001, and PCI-DSS.

Good-to-Have

- Experience in dealing with customers directly and working in a global delivery model.
- Negotiation Skills.
- Positive Assertive Communication (Written & Oral).
- External certifications any.

📌 Vulnerability Management Analyst – ICS/OT, Rapid7, Wiz & MCAS (Calgary)
🏢 Astra North Infoteck
📍 Calgary