: TVM Analyst responsible for enterprise vulnerability assessment, risk analysis, remediation tracking, reporting, and vulnerability management across infrastructure, applications, endpoints, networks, and cloud environments.

Location: Brampton, ON - Hybrid (2-3 Days WFO)

Contract Duration: 6-12 Month ContractKey Responsibilities

- Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
- Configure, execute, and monitor vulnerability scans using Qualys VMDR, Tenable/Nessus, Rapid7 InsightVM, or similar platforms.
- Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
- Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
- Work closely with infrastructure, security, and application teams to coordinate remediation efforts.
- Monitor vulnerability remediation activities against defined SLAs and escalate overdue or high-risk findings.
- Support vulnerability exception and risk acceptance processes while maintaining proper documentation.
- Develop vulnerability management dashboards, metrics, KPIs, and executive reports.
- Investigate emerging vulnerabilities and assess their impact on the organization's technology setting.
- Support vulnerability assessments related to zero-day threats, major security advisories, and actively exploited vulnerabilities.
- Identify recurring vulnerabilities and recommend security improvements to reduce overall risk exposure.
- Assist with process improvements, automation initiatives, and optimization of vulnerability scanning coverage.
- Maintain accurate records of assets, vulnerabilities, remediation status, and approved exceptions.

Core Qualifications

- 6-8 years of experience in Cybersecurity,



Vulnerability Management, Information Security, or a related field.
- Hands-on experience with vulnerability management platforms including:
- Qualys VMDR
- Tenable Vulnerability Management
- Nessus
- Rapid7 InsightVM

- Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
- Strong knowledge of:

- CVSS
- CVE
- CWE
- CPE
- Risk-Based Vulnerability Prioritization

- Experience managing vulnerabilities across enterprise environments.
- Strong understanding of:

- Operating Systems
- Networking
- Databases
- Web Applications
- Enterprise Infrastructure

- Experience analyzing vulnerability findings and recommending remediation strategies.
- Strong understanding of patch management and remediation processes.
- Experience translating technical findings into actionable recommendations.
- Excellent analytical, communication, documentation, and stakeholder management skills.

Preferred Qualifications

- Experience supporting vulnerability management across on-premises, cloud, and hybrid environments.
- Knowledge of AWS, Azure, and GCP security services.
- Familiarity with:
- CISA KEV
- Threat Intelligence
- Active Exploit Monitoring

- Experience developing vulnerability dashboards and remediation tracking reports.
- Exposure to automation and scripting using:

- Python
- PowerShell

- Experience improving vulnerability management programs and operational processes.

Key Skills

- Vulnerability Management
- Vulnerability Assessments
- Qualys VMDR
- Tenable
- Nessus
- Rapid7 InsightVM
- Cyber Security
- Information Security
- CVSS
- CVE
- CWE
- CPE
- Risk Assessment
- Patch Management
- Threat Intelligence
- Security Operations
- Cloud Security
- AWS Security
- Azure Security
- GCP Security
- Security Reporting
- Security Dashboards
- Python
- PowerShell
- Remediation Management

📌 Request ID: 114018 - TVM Analyst - Vulnerability Assessment & Management (Toronto)
🏢 FlexStaf IT
📍 Toronto