Lead Analyst, External Attack Surface & Vulnerability

Radio-Canada; Montreal (administrative region); Hybrid; CAD 110,000 - 140,000; Full time

Job summary

CBC/Radio-Canada is seeking a Lead Analyst, Vulnerability and External Attack Surface Management to optimize the Corporation’s program and design its external attack surface management service.

Based in Montreal or Toronto, this hybrid role requires five years in security, bilingual English-French, and proven ability to drive remediation, risk assessment and governance across cloud and on-premises environments.

Qualifications

• University degree in computer science, IT or information security.
• Minimum five years' experience in vulnerability management or IT governance.
• Experience with ISO/IEC 27001, 27002, 27005, NIST SP 800-53 / 800-161, COBIT and ITIL.
• Bilingualism (English and French) essential.

Responsibilities

• Map the external attack surface and inventory assets, domains, certificates, and APIs.
• Develop procedures to detect exposed services, expired certificates, and leaked credentials.
• Define scanning strategy and oversee vulnerability life cycle including remediation and verification.
• Lead zero-day response and coordinate rapid detection and mitigation.

Skills

Vulnerability management

Risk assessment

Information security

Communication skills

Cloud and web security

Education

University degree in computer science, IT or information security

Job description

CBC/Radio-Canada is seeking a Lead Analyst, Vulnerability and External Attack Surface Management to optimize the Corporation’s program and design its external attack surface management service.

Based in Montreal or Toronto, this hybrid role requires five years in security, bilingual English-French, and proven ability to drive remediation, risk assessment and governance across cloud and on-premises environments.