Senior Vulnerability Management Analyst

BRP; Montreal; On-site; CAD 95,000 - 135,000; Full time

Benefits offered by this job

Annual bonus

Generous paid time away

Pension plan

Collective saving opportunities

Healthcare fully paid by BRP

Flexible work schedule

Summer schedule by department/location

Holiday season shutdown

Educational resources

Discount on BRP products

Job summary

BRP in Montreal, QC seeks a Senior Vulnerability Management Specialist to lead the identification, assessment, prioritization, reporting, and remediation oversight of security vulnerabilities across enterprise environments.

You will partner with infrastructure, cloud, application, and security teams to drive remediation efforts, mature vulnerability management, and align with regulatory requirements. Strong communication to executive audiences is essential.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or equivalent.
• 5+ years in cybersecurity with at least 3 years in vulnerability management.
• Experience with vulnerability management platforms (Tenable, Qualys, Rapid7).

Responsibilities

• Lead enterprise vulnerability management across on-prem, cloud, and hybrid environments.
• Analyze scan results from multiple security platforms.
• Prioritize and classify vulnerabilities by risk, impact, and threat intel.
• Coordinate remediation with infrastructure, application, and operations teams.
• Track remediation progress against SLAs and report metrics.

Skills

Vulnerability management

Platform expertise

Windows & Linux

Cloud & container security

Risk assessment

Communication

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Tenable

Qualys

Rapid7

Azure

AWS

GCP

Job description

We are looking for a Senior Vulnerability Management Specialist responsible for leading the identification, assessment, prioritization, reporting, and remediation oversight of cybersecurity vulnerabilities across enterprise technology environments. This role serves as a subject matter expert for vulnerability management practices, helping to reduce organizational risk by ensuring vulnerabilities are continuously monitored, analyzed, and addressed in alignment with business priorities and regulatory requirements. The Senior Analyst partners with infrastructure, cloud, application, and security teams to drive remediation efforts, improve security posture, and mature vulnerability management capabilities across the organization.

You'll Have The Opportunity To

• Lead enterprise vulnerability management activities across on-premises, cloud, and hybrid environments.
• Conduct vulnerability assessments and analyze scan results from multiple security platforms.
• Validate, prioritize, and classify vulnerabilities based on risk, exploitability, business impact, and threat intelligence.
• Partner with infrastructure, application, cloud, and operations teams to coordinate remediation activities.
• Track and report remediation progress against established service-level agreements (SLAs).
• Develop risk-based vulnerability prioritization methodologies and processes.
• Investigate emerging threats and assess exposure to newly disclosed vulnerabilities and zero-day exploits.
• Produce executive and operational reporting, dashboards, and metrics related to vulnerability management performance.
• Support security audits, regulatory compliance requirements, and risk assessments.
• Maintain and optimize vulnerability scanning tools and related integrations.
• Provide technical guidance and mentorship to junior analysts and security team members.
• Contribute to continuous improvement initiatives, automation efforts, and vulnerability management program maturity.

YOU’LL THRIVE IN THIS ROLE IF YOU HAVE THE FOLLOWING SKILLS AND QUALITIES

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent work experience.
• 5+ years of cybersecurity experience with at least 3 years focused on vulnerability management.
• Experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or similar solutions.
• Strong understanding of CVSS, EPSS, KEV catalogs, and vulnerability prioritization methodologies.
• Experience working with Windows, Linux, networking, cloud, and containerized environments.
• Knowledge of security frameworks such as NIST CSF, CIS Controls, ISO 27001, or PCI DSS.
• Experience supporting remediation programs and managing cross-functional stakeholder relationships.
• Strong analytical, problem-solving, and risk assessment skills.
• Excellent written and verbal communication skills.
• Ability to present technical findings to both technical and executive audiences.

Assets

• CISSP, GSEC, CISM, GIAC, CRISC, or other relevant security certifications.
• Experience with cloud security platforms including Microsoft Azure, AWS, or Google Cloud Platform.
• Knowledge of threat intelligence and adversary tradecraft.
• Familiarity with attack surface management and exposure management programs.
• Experience with scripting and automation using Python, PowerShell, or similar languages.
• Knowledge of DevSecOps, CI/CD pipelines, and application security practices.
• Experience with EDR/XDR platforms, SIEM solutions, and Security Operations Centers (SOC).
• Understanding of penetration testing methodologies and vulnerability validation techniques.
• Experience working in highly regulated industries such as financial services, healthcare, or critical infrastructure.
• Bilingual (English and French) communication skills in Canadian environments.

ACKNOWLEDGING THE POWER OF DIVERSITY

BRP is dedicated to nurturing a culture that invites, connects, and propels the ambitions of people of all backgrounds, profiles, beliefs and experiences. Ultimately, the diversity and uniqueness of our people fuel our ingenuity and set the course for the path ahead!

For this reason, we value diversity and we strive to always push each other forward to build an inclusive workplace where every employee feels like they belong, where they can grow and find meaning.

AT BRP, WHEN WE TALK ABOUT BENEFITS, WE GO ALL IN.

Let’s start with a strong foundation — You want it, we have it:

• Annual bonus based on the company’s financial results
• Generous paid time away
• Pension plan
• Collective saving opportunities
• Industry leading healthcare fully paid by BRP

What About Some Feel Good Perks

• Flexible work schedule
• A summer schedule that varies by department and location
• Holiday season shutdown
• Educational resources
• Discount on BRP products

WELCOME TO BRP

We’re a world leader in recreational vehicles and boats, creating innovative ways to move on snow, water, asphalt, dirt and even in the air. Headquartered in the Canadian town of Valcourt, Quebec, our company is rooted in a spirit of ingenuity and intense customer focus. Today, we operate manufacturing facilities in Canada, the United States, Mexico, Finland, Australia and Austria, with a workforce made up of close to 20,000 spirited people, all driven by the deeply held belief that at work, as with life itself, it’s not about the destination; It’s about the journey.