Vulnerability Analyst

Location: Montreal, QC (Day 1 Onsite | Hybrid - 3 Days/Week In Office)

Duration: 12-Month Contract

Employment Type: Contract

About the Role

We are seeking an experienced Vulnerability Management Operations Analyst to join our Vulnerability Management Operations team. This role will support enterprise-wide vulnerability management initiatives, cloud security exposure assessments, remediation tracking, and cybersecurity analytics. The ideal candidate will possess strong expertise in vulnerability management platforms, security analytics, cloud security tools, and stakeholder engagement.

The successful candidate will play a critical role in identifying, analyzing, prioritizing, and coordinating remediation efforts for vulnerabilities across the organization's technology landscape while providing executive-level reporting and insights.

Key Responsibilities

• Execute day-to-day Vulnerability Management Operations activities.
• Perform vulnerability exposure assessments across cloud and on-premises environments.
• Analyze and prioritize vulnerabilities using CVE, CVSS, threat intelligence, and business risk context.
• Coordinate remediation efforts with infrastructure, cloud, application, and security teams.
• Track vulnerability remediation progress and ensure timely closure of findings.
• Monitor emerging threats, zero-day vulnerabilities, and cybersecurity advisories.
• Utilize Wiz, Prisma Cloud, and Qualys to identify and assess security exposures.
• Leverage Python and automation techniques to streamline vulnerability management processes.
• Analyze security data from Snowflake, PostgreSQL, and other enterprise data sources.
• Collaborate with stakeholders across security, technology, and business teams.
• Support after-hours incident response, on-call rotations, and occasional weekend activities as required.

Required Qualifications

Must-Have Skills

• 5+ years of experience in Vulnerability Management, Cybersecurity Operations, or Cybersecurity Analytics.
• 5+ years of hands-on experience with:
• Wiz
• Prisma Cloud
• Qualys
• Experience with SIEM solutions, preferably Splunk.
• Strong understanding of:
• CVEs
• CVSS Scoring
• Vulnerability Risk Assessment
• Vulnerability Remediation & Mitigation
• Exposure Management
• Experience coordinating remediation efforts across multiple stakeholder groups.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities in a fast-paced environment.

Nice-to-Have Skills

• Python scripting and security automation.
• Experience with Snowflake and PostgreSQL.
• AI/Agentic AI experience within cybersecurity operations.
• Cloud security experience across AWS, Azure, or GCP.
• Executive reporting and presentation experience.
• Knowledge of threat intelligence platforms and vulnerability prioritization frameworks.