Security Operations & Vulnerability Analyst

Multimatic; Canada; On-site; CAD 47,000 - 87,000; Full time

Job summary

Multimatic is seeking an IT Security Analyst to strengthen its security posture by managing vulnerability and threat management across infrastructure and applications. You will collaborate with IT teams to implement security controls and respond to incidents.

In this role you will monitor security alerts from SIEM/EDR, participate in incident response, patch management, risk assessments, and governance activities to reduce exposure and improve resilience. This is an onsite role in Canada.

Qualifications

• 5+ years of experience in IT Security or Security Operations.
• Strong experience in vulnerability management, threat analysis, and security tooling.
• Hands-on with vulnerability scanning and penetration testing tools.
• TCP/IP and common protocols knowledge; incident response experience.
• Bachelor’s degree in Computer Science, MIS, or related field (or equivalent).

Responsibilities

• Manage the full lifecycle of vulnerabilities from identification to remediation and validation.
• Analyze security alerts from SIEM, EDR, and other security tools; support incident response.
• Collaborate to design and embed secure architectures across infrastructure and applications.
• Conduct risk assessments and document findings in the risk register; report remediation status.
• Lead or contribute to security projects; ensure compliance with standards and policies.

Skills

Vulnerability management

Threat analysis

Incident response

Security operations

Threat hunting

Networking TCP/IP

Education

Bachelor's degree in Computer Science, MIS, or related field

Tools

SIEM

EDR

IDS/IPS

DLP

Job description

Multimatic is seeking an IT Security Analyst to strengthen its security posture by managing vulnerability and threat management across infrastructure and applications. You will collaborate with IT teams to implement security controls and respond to incidents.

In this role you will monitor security alerts from SIEM/EDR, participate in incident response, patch management, risk assessments, and governance activities to reduce exposure and improve resilience. This is an onsite role in Canada.