Request ID: 114018 - TVM Analyst - Vulnerability Assessment & Management

Flexstaf IT; Toronto; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Flexstaf IT is seeking a TVM Analyst in a Brampton-based hybrid role to lead enterprise vulnerability management across infrastructure, applications, endpoints, networks and cloud environments. You will configure scans (Qualys VMDR, Nessus, Tenable, InsightVM), analyze findings, and drive remediation with stakeholders.

The ideal candidate has 6–8 years in cybersecurity with hands-on vulnerability management and strong knowledge of CVSS, CVE, CWE, and CPE.

Qualifications

• 6–8 years in Cybersecurity or Vulnerability Management.
• Hands-on with Qualys VMDR, Tenable, Nessus and Rapid7 InsightVM.
• Understanding CVSS, CVE, CWE, CPE and risk-based prioritization.
• Experience across on-prem and cloud environments.

Responsibilities

• Perform day-to-day vulnerability management across infra, endpoints, servers, networks, apps, and cloud.
• Configure, execute, and monitor vulnerability scans with common platforms.
• Analyze results, validate findings, remove false positives, assess risk.
• Prioritize based on severity, asset criticality, exposure, and business impact.
• Coordinate remediation with IT and security teams, track SLAs.

Skills

Vulnerability Management

Security Assessments

Risk Analysis

Threat Intelligence

Python

PowerShell

Cloud Security

Patch Management

Stakeholder Management

Documentation

Tools

Qualys VMDR

Tenable

Nessus

Rapid7 InsightVM

Job description

Job Description: TVM Analyst responsible for enterprise vulnerability assessment, risk analysis, remediation tracking, reporting, and vulnerability management across infrastructure, applications, endpoints, networks, and cloud environments.

Location: Brampton, ON - Hybrid (2-3 Days WFO)

Contract Duration: 6-12 Month Contract

Key Responsibilities

• Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
• Configure, execute, and monitor vulnerability scans using Qualys VMDR, Tenable/Nessus, Rapid7 InsightVM, or similar platforms.
• Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
• Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
• Work closely with infrastructure, security, and application teams to coordinate remediation efforts.
• Monitor vulnerability remediation activities against defined SLAs and escalade overdue or high-risk findings.
• Support vulnerability exception and risk acceptance processes while maintaining proper documentation.
• Develop vulnerability management dashboards, metrics, KPIs, and executive reports.
• Investigate emerging vulnerabilities and assess their impact on the organization's technology environment.
• Support vulnerability assessments related to zero-day threats, major security advisories, and actively exploited vulnerabilities.
• Identify recurring vulnerabilities and recommend security improvements to reduce overall risk exposure.
• Assist with process improvements, automation initiatives, and optimization of vulnerability scanning coverage.
• Maintain accurate records of assets, vulnerabilities, remediation status, and approved exceptions.

Core Qualifications

• 6-8 years of experience in Cybersecurity, Vulnerability Management, Information Security, or a related field.
• Hands-on experience with vulnerability management platforms including:
  • Qualys VMDR
  • Tenable Vulnerability Management
  • Nessus
  • Rapid7 InsightVM
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
• Strong knowledge of:
  • CVSS
  • CVE
  • CWE
  • CPE
  • Risk-Based Vulnerability Prioritization
• Experience managing vulnerabilities across enterprise environments.
• Strong understanding of:
  • Operating Systems
  • Networking
  • Databases
  • Web Applications
  • Enterprise Infrastructure
• Experience analyzing vulnerability findings and recommending remediation strategies.
• Strong understanding of patch management and remediation processes.
• Experience translating technical findings into actionable recommendations.
• Excellent analytical, communication, documentation, and stakeholder management skills.

Preferred Qualifications

• Experience supporting vulnerability management across on-premises, cloud, and hybrid environments.
• Knowledge of AWS, Azure, and GCP security services.
• Familiarity with:
  • CISA KEV
  • Threat Intelligence
  • Active Exploit Monitoring
• Experience developing vulnerability dashboards and remediation tracking reports.
• Exposure to automation and scripting using:
  • Python
  • PowerShell
• Experience improving vulnerability management programs and operational processes.

Key Skills

• Vulnerability Management
• Vulnerability Assessments
• Qualys VMDR
• Tenable
• Nessus
• Rapid7 InsightVM
• Cyber Security
• Information Security
• CVSS
• CVE
• CWE
• CPE
• Risk Assessment
• Patch Management
• Threat Intelligence
• Security Operations
• Cloud Security
• AWS Security
• Azure Security
• GCP Security
• Security Reporting
• Security Dashboards
• Python
• PowerShell
• Remediation Management