Vulnerability Management Analyst

Placements24; Kimberley; Hybrid; CAD 70,000 - 110,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Retirement savings options

Home office stipend

Professional development opportunities

Job summary

Placements24 is seeking a proactive Vulnerability Management Analyst to join its cybersecurity team in a fully remote role. You will identify, assess, and manage vulnerabilities across IT infrastructure, using scanning tools, analyzing findings, and guiding remediation with IT operations.

The ideal candidate has 3+ years of vulnerability management, familiarity with Nessus, Qualys, and Rapid7 Nexpose, and strong communication skills.

Qualifications

• Bachelor's degree or equivalent work experience in a related field.
• Minimum 3 years in vulnerability management or a similar security role.
• Hands-on with vulnerability scanners (Nessus, Qualys, Rapid7 Nexpose).
• Knowledge of OWASP Top 10, CVEs, and risk-based remediation.
• Strong written and verbal communication for stakeholder reporting.

Responsibilities

• Conduct regular vulnerability scans across networks, servers, and applications.
• Assess findings, prioritize remediation by risk, and verify fixes.
• Develop and maintain a vulnerability management program.
• Collaborate with IT operations and development teams to track remediation.
• Produce reports on status, trends, and progress for management.

Skills

Analytical skills

Communication

Remote work capability

Python / PowerShell scripting

Education

Bachelor's degree in CS / IT / Cybersecurity

Tools

Nessus

Qualys

Rapid7 Nexpose

PowerShell

Job description

About the Role

Our client is seeking a proactive and detail-oriented Vulnerability Management Analyst to join their cybersecurity team. This role is responsible for identifying, assessing, and managing vulnerabilities across the organization's IT infrastructure. You will utilize various scanning tools, analyze findings, prioritize remediation efforts, and collaborate with IT teams to ensure timely patching and mitigation. The ideal candidate possesses a strong technical understanding of common vulnerabilities, network security, and operating systems, coupled with excellent analytical and communication skills. This is a fully remote position, allowing you to contribute to a more secure digital environment from anywhere. Your work will be crucial in proactively identifying and addressing security weaknesses before they can be exploited, significantly strengthening our client's overall security posture and reducing risk. We are committed to providing a supportive and growth-oriented remote work environment.

Key Responsibilities

• Conduct regular vulnerability scans across networks, servers, workstations, and applications using industry-standard tools.
• Analyze scan results to identify, prioritize, and validate vulnerabilities based on risk and impact.
• Develop and maintain a comprehensive vulnerability management program.
• Collaborate with IT operations, system administrators, and development teams to track and ensure the timely remediation of identified vulnerabilities.
• Track remediation efforts and verify the effectiveness of implemented fixes.
• Generate regular reports on vulnerability status, trends, and remediation progress for management and stakeholders.
• Stay informed about new and emerging vulnerabilities, threats, and security best practices.
• Assist in the development and maintenance of vulnerability management policies and procedures.
• Provide guidance and support to technical teams on vulnerability remediation techniques.
• Contribute to security awareness initiatives by highlighting common vulnerabilities and their impact.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent work experience.
• Minimum of 3 years of experience in vulnerability management, cybersecurity operations, or a related IT security role.
• Hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7 Nexpose).
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10, CVEs), network protocols, and operating systems (Windows, Linux).
• Familiarity with risk assessment methodologies and the vulnerability management lifecycle.
• Excellent analytical and problem-solving skills, with meticulous attention to detail.
• Strong written and verbal communication skills, with the ability to present technical information clearly.
• Ability to work independently and manage multiple tasks effectively in a remote setting.
• Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Relevant certifications such as CompTIA Security+, CEH, or GSEC are advantageous.

Benefits

• This fully remote role offers a competitive salary and a comprehensive benefits package, including health, dental, and vision insurance, as well as retirement savings options.
• Our client provides a stipend for home office setup and opportunities for professional development, including access to training materials and certifications.
• Enjoy the flexibility of working from home, supported by regular virtual team collaboration and a supportive work culture.
• This is an excellent opportunity to grow your career in cybersecurity with a company that values your contributions and well-being.