Vulnerability Management Analyst

Vulnerability Management Analyst

Job Type: Permanent

Location: Montreal / Hybrid, 3 days onsite

Salary: $75,000 - $85,000 + benefits

Your New Company

Our client is a large, established Canadian organisation with a significant technology footprint. They are looking to add a Vulnerability Management Analyst to their Cybersecurity team to strengthen vulnerability identification, risk-based prioritisation, remediation, and security awareness initiatives.

Your New Role

As the Vulnerability Management Analyst, you will support the identification, assessment, prioritisation, and remediation of security vulnerabilities across the organisation's IT environment.

A key focus of this role is going beyond vulnerability scanning. You will analyse vulnerabilities in context, considering exposure, exploitability, business impact, threat intelligence, and attack vectors to determine their true criticality and help technical teams prioritise remediation.

You will work closely with Cybersecurity Operations, Infrastructure, IT Operations, Cloud, and Development teams while also supporting phishing simulations and cybersecurity awareness programmes.

What You Need to Do

• Monitor emerging threats, CVEs, security advisories, and relevant threat intelligence.
• Perform and coordinate vulnerability assessments across servers, endpoints, cloud environments, and enterprise applications.
• Analyse and validate vulnerabilities based on exposure, exploitability, business impact, threat context, and attack vectors.
• Classify vulnerabilities by severity and provide clear, actionable remediation recommendations.
• Recommend patching, mitigating controls, and compensating controls where immediate remediation is unavailable.
• Work with Infrastructure, Cloud, IT Operations, Network, Development, and Security teams to drive remediation within established SLAs.
• Track vulnerabilities and remediation activity through ITSM workflows.
• Validate remediation and maintain vulnerability and exception records.
• Support cybersecurity audits and compliance initiatives.
• Help improve CMDB and asset inventory accuracy to strengthen vulnerability and risk visibility.
• Develop vulnerability metrics, dashboards, and executive-level reporting covering risk exposure and remediation progress.
• Plan, prepare, and deploy phishing campaigns and cybersecurity awareness training initiatives.
• Identify opportunities to continuously improve vulnerability management processes.

What You'll Need to Succeed

• University degree or diploma in Computer Science, Information Technology, IT Security, Cybersecurity, or a related discipline.
• Minimum 3 years of relevant IT experience in a similar position.
• Hands-on knowledge of vulnerability management, vulnerability assessment, patch management, and risk assessment.
• Strong understanding of CVE/CVSS frameworks, exploitability analysis, attack vectors, and risk-based vulnerability prioritisation.
• Solid understanding of operating systems, networking, cloud environments, servers, firewalls, databases, and infrastructure security.
• Experience with vulnerability management, security, patching, or ITSM technologies such as Rapid7 InsightVM, Tenable/Nessus, Qualys, Microsoft Defender for Endpoint, Armis, VIPR Pro, or ServiceNow.
• Strong analytical skills with the ability to translate technical vulnerabilities into risk-based remediation priorities.
• Ability to produce clear, well-documented vulnerability findings, recommendations, metrics, and reporting.
• Strong communication and collaboration skills with experience working across technical teams.
• Cybersecurity certifications such as CompTIA Security+, CEH, GIAC GSEC, or equivalent would be considered an asset.

What You'll Get in Return

You will have the opportunity to work with a talented team of professionals in a dynamic and supportive environment. The client is offering competitive compensation, professional development opportunities, and the chance to make a significant impact on the organisation's cybersecurity posture.

What You Need to Do Now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

This posting is for an existing vacancy with the organisation.

AI may be used to screen, assess or select applicants for the position.