Threat and Vulnerability Management Analyst

Skills: Cyber Security

Experience Required: 6–8 Years

Location: Brampton, ON – Hybrid (2–3 Days WFO)

Role Description

Responsibilities

- Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.

- Configure, execute, and monitor vulnerability scans using tools such as Qualys VMDR, Tenable/Nessus, or equivalent platforms.

- Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.

- Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.

- Work with technology and application teams to coordinate and track vulnerability remediation activities.

- Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities.

- Support vulnerability exception/risk acceptance processes and maintain appropriate documentation.

- Generate vulnerability management dashboards, metrics, and executive-level reports.

- Investigate emerging vulnerabilities and assess their potential impact on the organization's technology environment.

- Support vulnerability assessments following major security advisories, zero-day vulnerabilities, and actively exploited vulnerabilities.

- Identify trends and recurring vulnerabilities and recommend improvements to reduce the organization's overall vulnerability exposure.

- Assist with vulnerability management process improvements, automation, and optimization of scanning coverage.

- Maintain accurate records of assets, vulnerabilities,



remediation status, and exceptions.

Essential Skills

Required Skills & Experience

- 3+ years of experience in Vulnerability Management, Cybersecurity, Information Security, or a related discipline.

- Hands-on experience with one or more vulnerability management platforms, preferably:

- Qualys VMDR / Qualys Vulnerability Management

- Tenable Vulnerability Management / Nessus

- Rapid7 InsightVM or equivalent tools.

- Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.

- Good knowledge of CVSS, CWE, CVE, CPE, vulnerability severity, and risk-based prioritization.

- Understanding of operating systems, networking, databases, web applications, and common enterprise infrastructure technologies.

- Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.

- Strong understanding of patch management and vulnerability remediation processes.

- Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.

- Robust communication, analytical, and stakeholder-management skills.

Preferred Qualifications

- Experience with vulnerability management across on-premises, cloud, and hybrid environments.

- Knowledge of AWS/Azure/GCP security and cloud vulnerability management.

- Familiarity with CISA KEV, threat intelligence, and actively exploited vulnerabilities.

- Experience with vulnerability remediation tracking and security dashboards.

- Exposure to scripting/automation using Python, PowerShell, or similar technologies.

📌 Threat and Vulnerability Management Analyst (Brampton)
🏢 Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
📍 Brampton