Senior Vulnerability Management Analyst

TEEMA; Montreal (administrative region); Hybrid; CAD 95,000 - 135,000; Full time

Job summary

TEEMA in Montreal is seeking a Senior Vulnerability Management Analyst to lead enterprise programs across on-premises, cloud, and hybrid environments. You will assess scan results, prioritize risks, and partner with infrastructure, app, cloud, and security teams to drive remediation.

You will produce executive dashboards, support audits and regulatory requirements, and mentor junior analysts while advancing automation and program maturity.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or related field.
• 5+ years in cybersecurity, with 3+ years in vulnerability management.
• Hands-on with vulnerability platforms: Tenable, Qualys, Rapid7.
• Knowledge of CVSS, EPSS, KEV, and prioritization methods.
• Experience with Windows, Linux, networking, cloud, and containers.
• Familiarity with NIST CSF, CIS Controls, ISO 27001, or PCI DSS.
• Strong analytic, communication, and stakeholder management skills.

Responsibilities

• Lead enterprise vulnerability management activities across on-prem, cloud, and hybrid environments.
• Conduct vulnerability assessments and analyze scan results from multiple platforms.
• Validate, prioritize, and classify vulnerabilities based on risk and threat intel.
• Coordinate remediation with infrastructure, app, cloud, and operations teams.
• Track and report remediation progress against SLAs.
• Develop risk-based vulnerability prioritization methodologies and processes.
• Investigate emerging threats and assess exposure to new vulnerabilities.
• Produce executive dashboards and operational reporting on vulnerability metrics.
• Support security audits, regulatory requirements, and risk assessments.
• Maintain and optimize vulnerability scanning tools and integrations.
• Provide guidance and mentorship to junior analysts and security team members.
• Contribute to continuous improvement, automation, and program maturity.

Skills

Vulnerability management

Cybersecurity

Threat intelligence

CVSS/EPSS knowledge

Stakeholder communication

Remediation coordination

Education

Bachelor’s degree in Cybersecurity, IT, CS, or related field

Tools

Tenable

Qualys

Rapid7

Job description

Job Title: Senior Vulnerability Management Analyst –86515
Job ID: 90346
Location: Montreal, Quebec/ Remote

What you will be doing:

• Lead enterprise vulnerability management activities across on-premises, cloud, and hybrid environments.
• Conduct vulnerability assessments and analyze scan results from multiple security platforms.
• Validate, prioritize, and classify vulnerabilities based on risk, exploitability, business impact, and threat intelligence.
• Partner with infrastructure, application, cloud, and operations teams to coordinate remediation activities.
• Track and report remediation progress against established service level agreements (SLAs).
• Develop risk-based vulnerability prioritization methodologies and processes.
• Investigate emerging threats and assess exposure to newly disclosed vulnerabilities and zero-day exploits.
• Produce executive and operational reporting, dashboards, and metrics related to vulnerability management performance.
• Support security audits, regulatory compliance requirements, and risk assessments.
• Maintain and optimize vulnerability scanning tools and related integrations.
• Provide technical guidance and mentorship to junior analysts and security team members.
• Contribute to continuous improvement initiatives, automation efforts, and vulnerability management program maturity.

What you must have:

• Education:Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent professional experience).
• Experience:5+ years of cybersecurity experience, with at least 3 years specifically focused on vulnerability management.
• Technical Proficiency:Hands-on experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or similar.
• Methodology:Strong understanding of CVSS, EPSS, KEV catalogs, and vulnerability prioritization methodologies.
• Environments:Experience working with Windows, Linux, networking, cloud, and containerized environments.
• Compliance:Knowledge of security frameworks such as NIST CSF, CIS Controls, ISO 27001, or PCI DSS.
• Soft Skills:Strong analytical, problem-solving, and risk assessment skills; excellent written and verbal communication skills; ability to present technical findings to both technical and executive audiences.
• Stakeholder Management:Experience supporting remediation programs and managing cross-functional stakeholder relationships.