Threat and Vulnerability Management Analyst

Skills: Cyber Security

Experience Required: 68 Years

Location: Brampton ON Hybrid (23 Days WFO)

Role Description

Responsibilities

- Perform day-to-day vulnerability management activities across infrastructure endpoints servers network devices applications and cloud environments.

- Configure execute and monitor vulnerability scans using tools such as Qualys VMDR Tenable/Nessus or equivalent platforms.

- Analyze vulnerability scan results validate findings eliminate false positives and assess associated security risks.

- Prioritize vulnerabilities based on severity exploitability asset criticality exposure and business impact.

- Work with technology and application teams to coordinate and track vulnerability remediation activities.

- Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities.

- Support vulnerability exception/risk acceptance processes and maintain appropriate documentation.

- Generate vulnerability management dashboards metrics and executive-level reports.

- Investigate emerging vulnerabilities and assess their potential impact on the organizations technology environment.

- Support vulnerability assessments following major security advisories zero-day vulnerabilities and actively exploited vulnerabilities.

- Identify trends and recurring vulnerabilities and recommend improvements to reduce the organizations overall vulnerability exposure.

- Assist with vulnerability management process improvements automation and optimization of scanning coverage.





- Maintain accurate records of assets vulnerabilities remediation status and exceptions.

Essential Skills

Required Skills & Experience

- 3 years of experience in Vulnerability Management Cybersecurity Information Security or a related discipline.

- Hands-on experience with one or more vulnerability management platforms preferably:

- Qualys VMDR / Qualys Vulnerability Management

- Tenable Vulnerability Management / Nessus

- Rapid7 InsightVM or equivalent tools.

- Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.

- Positive knowledge of CVSS CWE CVE CPE vulnerability severity and risk-based prioritization.

- Understanding of operating systems networking databases web applications and common enterprise infrastructure technologies.

- Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.

- Strong understanding of patch management and vulnerability remediation processes.

- Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.

- Strong communication analytical and stakeholder-management skills.

Preferred Qualifications

- Experience with vulnerability management across on-premises cloud and hybrid environments.

- Knowledge of AWS/Azure/GCP security and cloud vulnerability management.

- Familiarity with CISA KEV threat intelligence and actively exploited vulnerabilities.

- Experience with vulnerability remediation tracking and security dashboards.

- Exposure to scripting/automation using Python PowerShell or similar technologies.

Required Skills:

Salesforce

📌 Threat and Vulnerability Management Analyst (Brampton)
🏢 Astra North Infoteck
📍 Brampton