Job Description Threat and Vulnerability Management Analyst Skills: Cyber Security Experience Required: 6–8 Years Location: Brampton, ON – Hybrid (2–3 Days WFO) Role Description Responsibilities Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.

Configure, execute, and monitor vulnerability scans using tools such as Qualys VMDR, Tenable/Nessus, or equivalent platforms.

Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.

Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.

Work with technology and application teams to coordinate and track vulnerability remediation activities.

Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities.

Support vulnerability exception/risk acceptance processes and maintain appropriate documentation.

Generate vulnerability management dashboards, metrics, and executive-level reports.

Investigate emerging vulnerabilities and assess their potential impact on the organization's technology environment.

Support vulnerability assessments following major security advisories, zero-day vulnerabilities, and actively exploited vulnerabilities.

Identify trends and recurring vulnerabilities and recommend improvements to reduce the organization's overall vulnerability exposure.

Assist with vulnerability management process improvements, automation, and optimization of scanning coverage.

Maintain accurate records of assets, vulnerabilities,



remediation status, and exceptions.

Essential Skills Required Skills & Experience 3+ years of experience in Vulnerability Management, Cybersecurity, Information Security, or a related discipline.

Hands-on experience with one or more vulnerability management platforms, preferably: Qualys VMDR / Qualys Vulnerability Management Tenable Vulnerability Management / Nessus Rapid7 InsightVM or equivalent tools.

Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.

Good knowledge of CVSS, CWE, CVE, CPE, vulnerability severity, and risk-based prioritization.

Understanding of operating systems, networking, databases, web applications, and common enterprise infrastructure technologies.

Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.

Strong understanding of patch management and vulnerability remediation processes.

Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.

Solid communication, analytical, and stakeholder-management skills.

Preferred Qualifications Experience with vulnerability management across on-premises, cloud, and hybrid environments.

Knowledge of AWS/Azure/GCP security and cloud vulnerability management.

Familiarity with CISA KEV, threat intelligence, and actively exploited vulnerabilities.

Experience with vulnerability remediation tracking and security dashboards.

Exposure to scripting/automation using Python, Power

Shell, or similar technologies.

Requirements Salesforce

📌 Threat and Vulnerability Management Analyst (Brampton)
🏢 Astra North Infoteck
📍 Brampton