ICS/OT Vulnerability Management Analyst - Hybrid Role

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Calgary; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking a Vulnerability Management Senior Analyst in Calgary. You will own the vulnerability lifecycle, from identification to validation, with emphasis on ICS risk and cross-functional coordination across OT, IT, cybersecurity, and operations teams.

The role requires hands-on use of Rapid7, MCAS, Wiz, and experience with Tenable and Qualys. You will drive patching, threat intel integration, and reporting to strengthen the organization’s security posture in a hybrid

Qualifications

• Monitor threat intelligence and vendor advisories.
• Analyze vulnerabilities affecting ICS (Industrial Control Systems).
• Analyze and conduct vulnerability assessments for ICS devices.
• Coordinate activities between OT, IT, cybersecurity, and operations teams.
• Conduct regular vulnerability scans using Tenable, Qualys, and Rapid7 to identify critical gaps.
• Manage end-to-end vulnerability lifecycle: identification, assessment, prioritization, remediation, validation.
• Partner with security operations and incident response to address actively exploited vulnerabilities.
• Deliver continuous improvement to enhance scanning coverage and reduce MTTR.
• Perform risk-based prioritization using threat intel and business impact.
• Drive timely remediation and patch management with SLA adherence.
• Validate remediation via re-scans and verification to close tickets.
• Analyze vulnerability data and generate actionable reports for technical and exec stakeholders.
• Leverage Python/PowerShell and APIs to automate scanning, reporting, and remediation workflows.
• Monitor emerging threats via CVE feeds and map exploitability to risk.

Responsibilities

• Lead vulnerability lifecycle activities across network, systems and applications.
• Prioritize remediation efforts based on risk and business impact.
• Coordinate patch management and remediation with multiple teams.
• Validate remediation through re-scans and verification activities.
• Produce dashboards and reports for technical and executive audiences.

Skills

Vulnerability lifecycle management

Risk-based prioritization

Patch management processes

Remediation validation and reporting

False positive analysis

SLA tracking

Penetration testing basics

Rapid7

MCAS

Wiz

Tools

Tenable

Qualys

Rapid7

Python

PowerShell

APIs

Job description

Astra-North Infoteck Inc. is seeking a Vulnerability Management Senior Analyst in Calgary. You will own the vulnerability lifecycle, from identification to validation, with emphasis on ICS risk and cross-functional coordination across OT, IT, cybersecurity, and operations teams.

The role requires hands-on use of Rapid7, MCAS, Wiz, and experience with Tenable and Qualys. You will drive patching, threat intel integration, and reporting to strengthen the organization’s security posture in a hybrid