Senior Analyst, Vulnerability Management

Intelcom; Montreal; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

On-site gym

Lunch provided by employer

Group insurance

Group RRSP plan

Care & Well‑Being Activities

Transportation reimbursement

Employee Assistance Program

Job summary

Intelcom | Dragonfly is seeking a senior vulnerability management professional to lead threat identification and automated remediation across IT and OT environments. You will define workflows, coordinate teams, and drive rapid risk reduction while delivering regular executive-facing reports.

The role emphasizes automation, threat intelligence, and cloud/endpoint security, with an opportunity to influence security strategy in a dynamic logistics tech environment in Montreal.

Qualifications

• 5 to 10+ years of threat and vulnerability management experience.
• Security certifications such as CISSP, CEH, Security+, or GIAC.
• Experience automating vulnerability workflows and using threat intel.
• Experience with cloud, networks, endpoints, and remediation workflows.

Responsibilities

• Monitor threat intelligence, security research, and advisories to identify vulnerabilities.
• Define and implement automated vulnerability management workflows.
• Coordinate vulnerability management across IT and OT environments.
• Ensure regular vulnerability testing and rapid remediation with SLAs.
• Generate and maintain vulnerability reports and dashboards for technical and executive teams.

Skills

Vulnerability management

Threat hunting

Automation design

Risk mitigation

Security analytics

Cross-functional collaboration

End-to-end vulnerability lifecycle

Education

Degree in computer science or related field

CISSP certification

GIAC/Security+/CEH certification

Tools

Python

PowerShell

Bash

Job description

Intelcom | Dragonfly

With more than 100 sorting stations and operations across three continents, Intelcom | Dragonfly is Canada's leader in last-mile logistics. Our vision is clear: to deliver fast, accurate, and reliable service powered by cutting-edge technology.

A Strategic Role at the Heart of Logistic

Key Responsibilities

• Monitor relevant threat intelligence, security research, and vendor advisories to identify vulnerabilities that may affect the organization.
• Define and implement automated vulnerability management workflows.
• Coordinate vulnerability management activities across IT and OT environments.
• Ensure regular vulnerability testing and rapid remediation are performed across networks, systems, applications, code, and cloud environments.
• Manage the end-to-end vulnerability lifecycle and partner with 3rd Party Vendors, System Administrators, Development, DevOps teams to reduce attack surface and address vulnerabilities at their source.
• Drive timely remediation and risk mitigation in accordance with established SLAs while improving the accuracy of findings and reducing false positives.
• Continuously improve scanning coverage, vulnerability detection, prioritization methods, remediation workflows, and program effectiveness.
• Review patching, mitigation, risk acceptance, and prioritization scenarios and provide evidence-based recommendations.
• Generate and maintain vulnerability management reports and dashboards for technical teams and executive stakeholders.

Required Skills & Experience

• Strong experience with vulnerability, exposure management and automation
• Strong experience conducting proactive threat hunting to identify hidden vulnerabilities and emerging threats that automated systems may miss.
• Ability to define, design and implement automated Vulnerability Management Workflows
• Experience in applying threat intelligence and contextual information to vulnerability prioritization and remediation decisions.
• Proficiency in automation and scripting using languages such as Python, PowerShell, Bash, or equivalent.
• Experience analyzing security data across endpoints, networks, identities, applications, code, and cloud environments as it relates to vulnerability and exposure management.
• Experience training or benchmarking Artificial Intelligence systems
• Experience evaluating the accuracy and depth of Artificial intelligence -generated findings, incidents, tickets, analyses, and recommendations

Qualifications

• Degree in computer science or a related field, with 5 to 10+ years of relevant experience in threat and vulnerability management, or an equivalent combination of education and experience.
• Relevant security certification(s), such as CISSP, CEH, Security+, or GIAC, or demonstrated equivalent security knowledge and experience.
• Additional vulnerability management, cloud security, or vendor-specific certifications are considered an asset.

Why Join Us?

At Intelcom | Dragonfly , you'll thrive in a flexible and stimulating environment, surrounded by passionate talent. You'll also enjoy a wide range of benefits:

• On-site gym with a personal trainer
• Employer-provided lunch of your choice
• Comprehensive group insurance
• Group RRSP plan
• Care & Well‑Being Activities
• Partial reimbursement for public transportationEmployee Assistance Program
• ...and much more.

This position has been opened to address a genuine organizational need within the company.

At Intelcom | Dragonfly , we move forward guided by strong values: collaboration, innovation, excellence, and responsibility.

We embrace diversity, ensure equity, and foster a true sense of belonging.

Accommodation measures are available for individuals with disabilities throughout our recruitment process, in compliance with the law. Please let us know if you have any specific needs.