# Senior Vulnerability ManagerMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Here's a brief overview of the tasks and responsibilities you'll have : • Lead enterprise-wide vulnerability management activities across on-premises, cloud, and hybrid environments; • Perform vulnerability assessments and analyze results from different security platforms; • Validate, prioritize, and classify vulnerabilities based on risk level, exploitability, business impact, and threat intelligence; • Collaborate with infrastructure, application development, cloud and operations teams to coordinate remediation activities; • Track the progress of patches according to established service level agreements; • Develop risk-based vulnerability prioritization methodologies and processes; • Analyze emerging threats and assess exposure to newly disclosed vulnerabilities as well as zero-day vulnerabilities; • Produce reports,



dashboards and performance indicators related to vulnerability management for operational and executive stakeholders; • Support security audits, regulatory compliance requirements, and risk assessments; • Maintain and optimize vulnerability scanning tools and their integrations; • Support junior analysts and security team members by providing technical advice; • Contribute to continuous improvement, process automation, and vulnerability management program maturity. The profile you are looking for is as follows: • Bachelor's degree in cybersecurity, information technology, computer science or a related field, or equivalent experience; • Have more than five (5) years of experience in cybersecurity, including at least three years in vulnerability management; • Proficient in vulnerability management platforms such as Tenable, Qualys, Rapid7 or similar solutions; • Be familiar with vulnerability prioritization frameworks and methodologies, including CVSS, EPSS, and KEV catalogs; • Experience with Windows, Linux, networking, cloud and containerized environments; • Master security standards such as NIST CSF, CIS Controls,



ISO 27001 or PCI DSS; • Demonstrate experience in managing remediation programs and working with multidisciplinary stakeholders; • Possess strong analytical, problem-solving and risk assessment skills; • Demonstrate excellent written and verbal communication skills; • Present technical results to technical and management audiences; • Hold CISSP, GSEC, CISM, GIAC, CRISC or other relevant security certifications (an asset); • Knowledge of Microsoft Azure, AWS or Google Cloud Platform cloud security platforms (an asset); • Knowledge of SAP (an asset); • Understand threat intelligence concepts and techniques used by malicious actors (an asset); • Knowledge of attack surface management and exposure management programs (an asset); • Experience in automation and scripting with Python, PowerShell or similar languages (an asset); • Proficient in DevSecOps principles, continuous integration and continuous deployment pipelines, and application security practices (an asset); • Experience with EDR/XDR platforms, SIEM solutions, and security operations centers (an asset); • Understand penetration testing methodologies and vulnerability validation techniques (an asset); • Experience in highly regulated industries such as financial services, healthcare, or critical infrastructure (an asset); • This position requires fluency in French and English for daily tasks, understanding documentation, and skilled communication with customers, suppliers, and colleagues across Canada.

French and English language skills are essential, both oral and written.

📌 Senior Vulnerability Manager (Montreal)
🏢 COFOMO
📍 Montreal