Vulnerability Management Senior Analyst
- Calgary, AB, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Required Technical Skill Set
- Vulnerability lifecycle management (identify assess prioritize remediate verify)
- Risk-based prioritization
- Patch management processes and coordination
- Remediation validation and reporting
- False positive analysis and tuning
- SLA tracking and compliance alignment
- Penetration testing basics
- Hands-on experience in Rapid7, MCAS, and Wiz
- Monitor threat intelligence and vendor advisories.
- Analyze vulnerabilities affecting ICS (Industrial Control Systems).
- Analyze and conduct vulnerability assessments for ICS devices.
- Coordinate activities between OT, IT, cybersecurity, and operations teams.
- Conduct regular vulnerability scans across networks, systems, and applications using tools such as Tenable, Qualys, and Rapid7, identifying critical security gaps.
- Manage the end-to-end vulnerability lifecycle, including identification, assessment, prioritization, remediation, and validation.
- Partner with security operations and incident response teams to address actively exploited vulnerabilities and reduce attack surface.
- Deliver continuous improvement initiatives to enhance scanning coverage, reduce MTTR, and strengthen overall security posture.
- Perform risk-based prioritization using threat intelligence and business impact to focus remediation on high-risk vulnerabilities.
- Drive timely remediation and patch management, ensuring SLA adherence.
- Validate remediation efforts through re-scans and manual verification, reducing false positives and ensuring accurate closure.
- Analyze vulnerability data and generate actionable reports and dashboards for technical teams and executive stakeholders.
- Leverage automation using Python/PowerShell and APIs to streamline vulnerability scanning, reporting, and remediation workflows.
- Monitor emerging threats using CVE and threat intelligence feeds, correlating exploitability with organizational risk.
- Ensure compliance with industry standards and frameworks such as NIST, CIS Benchmarks, ISO 27001, and PCI-DSS.
- Experience in dealing with customers directly and working in a global delivery model.
- Negotiation skills.
- Good assertive communication (written & oral).
- External certifications.
More about this job
Responsibilities
Manage the end-to-end vulnerability lifecycle for IT and ICS environments, including identification, prioritization, and remediation validation. Coordinate with cross-functional teams to reduce the attack surface and ensure compliance with security frameworks.
Requirements
Requires hands-on experience with vulnerability scanning tools like Rapid7, Tenable, and Wiz, along with proficiency in Python or PowerShell for automation. Candidates must be able to analyze ICS vulnerabilities and drive remediation efforts according to established SLAs.
Skills
- Vulnerability Management
- Risk-based Prioritization
- Patch Management
- Rapid7
- MCAS
- Wiz
- Tenable
- Qualys
- ICS Security
- Python
- PowerShell
- API Integration
- Threat Intelligence
- NIST
- ISO 27001
- PCI-DSS
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
- Software
- Engineering
Keywords
- Vulnerability Management
- ICS
- OT Security
- Rapid7
- MCAS
- Wiz
- Tenable
- Qualys
- Patch Management
- CVE
- NIST
- CIS Benchmarks
- ISO 27001
- PCI-DSS
- Python
- PowerShell
- API
- Threat Intelligence
- Risk Assessment
- SLA Tracking
- MTTR
- Penetration Testing
- False Positive Analysis
- Remediation Validation
- Security Operations
- Incident Response