At a glance
Automatically prepared from the listing. Check the original description for the full requirements.
Jump to the original descriptionResponsibilities
Manage the end-to-end vulnerability lifecycle for IT and ICS/OT environments, focusing on identification, prioritization, and remediation. Coordinate with cross-functional teams to reduce the attack surface and ensure compliance with security frameworks.
Requirements
Requires hands-on experience with Rapid7, Wiz, and MCAS, along with a strong background in Industrial Control Systems (ICS) security. Proficiency in automation using Python or PowerShell and knowledge of industry standards like NIST and CIS is expected.
Working hours
40 hours per week
Skills
- Vulnerability Management
- ICS/OT Security
- Rapid7
- Wiz
- MCAS
- Patch Management
- Risk-based Prioritization
- Tenable
- Qualys
- Python
- PowerShell
- Threat Intelligence
- SLA Tracking
- Penetration Testing
- NIST
- ISO 27001
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
- Engineering
- Software
Keywords
- Vulnerability Management
- ICS
- OT
- Rapid7
- Wiz
- MCAS
- Tenable
- Qualys
- Patch Management
- CVE
- Threat Intelligence
- NIST
- CIS Benchmarks
- ISO 27001
- PCI-DSS
- Python
- PowerShell
- API
- MTTR
- Risk-based Prioritization
- Penetration Testing
- Industrial Control Systems
- Cybersecurity
- SLA
- False Positive Analysis
Original job description
Vulnerability Management Senior Analyst – Rapid7, Wiz, MCAS & ICS Security
Location: Calgary - 4 days WFO
Hybrid
Required Technical Skill Set
• Vulnerability lifecycle management (identify → assess → prioritize → remediate → verify)
• Risk-based prioritization
• Patch management processes and coordination
• Remediation validation and reporting
• False positive analysis and tuning
• SLA tracking and compliance alignment
• Penetration testing basics
• Hands-on experience in Rapid7, MCAS, Wiz.
Must-Have
• Monitor threat intelligence and vendor advisories.
• Analyze vulnerabilities affecting ICS (Industrial Control Systems).
• Analyze and Conduct vulnerability assessments for ICS devices.
• Coordinate activities between OT, IT, cybersecurity, and operations teams.
• Conducted regular vulnerability scans across network, systems, and applications using tools such as Tenable, Qualys, and Rapid7, identifying critical security gaps.
• Managed the end-to-end vulnerability lifecycle including identification, assessment, prioritization, remediation, and validation.
• Partnered with security operations and incident response teams to address actively exploited vulnerabilities and reduce attack surface.
• Delivered continuous improvement initiatives to enhance scanning coverage, reduce MTTR, and strengthen overall security posture.
• Performed risk-based prioritization using threat intelligence and business impact to focus remediation on high-risk vulnerabilities.
• Drive timely remediation and patch management, ensuring SLA adherence.
• Validated remediation efforts through re-scans and manual verification, reducing false positives and ensuring accurate closure.
• Analyzed vulnerability data and generated actionable reports and dashboards for technical teams and executive stakeholders.
• Leveraged automation using Python/PowerShell and APIs to streamline vulnerability scanning, reporting, and remediation workflows.
• Monitored emerging threats using CVE and threat intelligence feeds, correlating exploitability with organizational risk.
• Ensured compliance with industry standards and frameworks such as NIST, CIS Benchmarks, ISO 27001, and PCI-DSS.
Good-to-Have
• Experience in dealing with customers directly and working in a global delivery model.
• Negotiation Skills.
• Good Assertive Communication (Written & Oral).
• External certifications any.
