Tenable Vulnerability Management Analyst

Requisition: 114018

Position: TVM Analyst - Vulnerability Assessment & Management

Type: Contract

Duration: 6-12 Month Contract

Location: Brampton, ON (Hybrid, 2 to 3 days onsite)

MANDATORY

6-8 years of experience in Cybersecurity, Vulnerability Management, Information Security, or a related field.

TVM Analyst responsible for enterprise vulnerability assessment, risk analysis, remediation tracking, reporting, and vulnerability management across infrastructure, applications, endpoints, networks, and cloud environments.

Key Responsibilities

• Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
• Configure, execute, and monitor vulnerability scans using Qualys VMDR, Tenable/Nessus, Rapid7 InsightVM, or similar platforms.
• Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
• Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
• Work closely with infrastructure, security, and application teams to coordinate remediation efforts.
• Monitor vulnerability remediation activities against defined SLAs and escalate overdue or high-risk findings.
• Support vulnerability exception and risk acceptance processes while maintaining proper documentation.
• Develop vulnerability management dashboards, metrics, KPIs, and executive reports.
• Investigate emerging vulnerabilities and assess their impact on the organization's technology environment.
• Support vulnerability assessments related to zero-day threats, major security advisories, and actively exploited vulnerabilities.
• Identify recurring vulnerabilities and recommend security improvements to reduce overall risk exposure.
• Assist with process improvements, automation initiatives, and optimization of vulnerability scanning coverage.
• Maintain accurate records of assets, vulnerabilities, remediation status, and approved exceptions.

Key Skills

• Vulnerability Management
• Vulnerability Assessments
• Qualys VMDR
• Tenable
• Nessus
• Rapid7 InsightVM
• Cyber Security
• Information Security
• CVSS
• CVE
• CWE
• CPE
• Risk Assessment
• Patch Management
• Threat Intelligence
• Security Operations
• Cloud Security
• AWS Security
• Azure Security
• GCP Security
• Security Reporting
• Security Dashboards
• Python
• PowerShell
• Remediation Management

Core Qualifications

• 6-8 years of experience in Cybersecurity, Vulnerability Management, Information Security, or a related field.
• Hands-on experience with vulnerability management platforms including: Qualys VMDR, Tenable Vulnerability Management, Nessus, Rapid7 InsightVM
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
• Strong knowledge of: CVSS, CVE, CWE, CPE, Risk-Based Vulnerability Prioritization
• Experience managing vulnerabilities across enterprise environments.
• Strong understanding of: Operating Systems, Networking, Databases, Web Applications, Enterprise Infrastructure
• Experience analyzing vulnerability findings and recommending remediation strategies.
• Strong understanding of patch management and remediation processes.
• Experience translating technical findings into actionable recommendations.
• Excellent analytical, communication, documentation, and stakeholder management skills.

Preferred Qualifications

• Experience supporting vulnerability management across on-premises, cloud, and hybrid environments.
• Knowledge of AWS, Azure, and GCP security services.
• Familiarity with: CISA KEV, Threat Intelligence, Active Exploit Monitoring
• Experience developing vulnerability dashboards and remediation tracking reports.
• Exposure to automation and scripting using: Python, PowerShell
• Experience improving vulnerability management programs and operational processes.