Vulnerability Management Analyst – ICS/OT, Rapid7, Wiz & MCAS

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Calgary; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking a Vulnerability Management Senior Analyst in Calgary. You will own the vulnerability lifecycle, from identification to validation, with emphasis on ICS risk and cross-functional coordination across OT, IT, cybersecurity, and operations teams.

The role requires hands-on use of Rapid7, MCAS, Wiz, and experience with Tenable and Qualys. You will drive patching, threat intel integration, and reporting to strengthen the organization’s security posture in a hybrid

Qualifications

• Monitor threat intelligence and vendor advisories.
• Analyze vulnerabilities affecting ICS (Industrial Control Systems).
• Analyze and conduct vulnerability assessments for ICS devices.
• Coordinate activities between OT, IT, cybersecurity, and operations teams.
• Conduct regular vulnerability scans using Tenable, Qualys, and Rapid7 to identify critical gaps.
• Manage end-to-end vulnerability lifecycle: identification, assessment, prioritization, remediation, validation.
• Partner with security operations and incident response to address actively exploited vulnerabilities.
• Deliver continuous improvement to enhance scanning coverage and reduce MTTR.
• Perform risk-based prioritization using threat intel and business impact.
• Drive timely remediation and patch management with SLA adherence.
• Validate remediation via re-scans and verification to close tickets.
• Analyze vulnerability data and generate actionable reports for technical and exec stakeholders.
• Leverage Python/PowerShell and APIs to automate scanning, reporting, and remediation workflows.
• Monitor emerging threats via CVE feeds and map exploitability to risk.

Responsibilities

• Lead vulnerability lifecycle activities across network, systems and applications.
• Prioritize remediation efforts based on risk and business impact.
• Coordinate patch management and remediation with multiple teams.
• Validate remediation through re-scans and verification activities.
• Produce dashboards and reports for technical and executive audiences.

Skills

Vulnerability lifecycle management

Risk-based prioritization

Patch management processes

Remediation validation and reporting

False positive analysis

SLA tracking

Penetration testing basics

Rapid7

MCAS

Wiz

Tools

Tenable

Qualys

Rapid7

Python

PowerShell

APIs

Job description

Vulnerability Management Senior Analyst – Rapid7, Wiz, MCAS & ICSSecurity

Location: Calgary - 4 days WFO

Hybrid

Required Technical Skill Set

• Vulnerability lifecycle management (identify → assess → prioritize → remediate → verify)
• Risk-based prioritization
• Patch management processes and coordination
• Remediation validation and reporting
• False positive analysis and tuning
• SLA tracking and compliance alignment
• Penetration testing basics
• Hands-on experience in Rapid7, MCAS, Wiz.

Must-Have

• Monitor threat intelligence and vendor advisories.
• Analyze vulnerabilities affecting ICS (Industrial Control Systems).
• Analyze and Conduct vulnerability assessments for ICS devices.
• Coordinate activities between OT, IT, cybersecurity, and operations teams.
• Conducted regular vulnerability scans across network, systems, and applications using tools such as Tenable, Qualys, and Rapid7, identifying critical security gaps.
• Managed the end-to-end vulnerability lifecycle including identification, assessment, prioritization, remediation, and validation.
• Partnered with security operations and incident response teams to address actively exploited vulnerabilities and reduce attack surface.
• Delivered continuous improvement initiatives to enhance scanning coverage, reduce MTTR, and strengthen overall security posture.
• Performed risk-based prioritization using threat intelligence and business impact to focus remediation on high-risk vulnerabilities.
• Drive timely remediation and patch management, ensuring SLA adherence.
• Validated remediation efforts through re-scans and manual verification, reducing false positives and ensuring accurate closure.
• Analyzed vulnerability data and generated actionable reports and dashboards for technical teams and executive stakeholders.
• Leveraged automation using Python/PowerShell and APIs to streamline vulnerability scanning, reporting, and remediation workflows.
• Monitored emerging threats using CVE and threat intelligence feeds, correlating exploitability with organizational risk.
• Ensured compliance with industry standards and frameworks such as NIST, CIS Benchmarks, ISO 27001, and PCI-DSS.

Good-to-Have

• Experience in dealing with customers directly and working in a global delivery model.
• Negotiation Skills.
• Good Assertive Communication (Written & Oral).
• External certifications any.