Hiring TVM Analyst in Brampton, ON

Job Title: TVM Analyst - Vulnerability Assessment & Management, Reporting

Location: Brampton, ON - Hybrid (2-3 Days WFO)

Duration: 06-12 Months

Hourly Pay Rate: 50 CAD/hr.

Job Description:

Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments. Configure, execute, and monitor vulnerability scans using tools such as Qualys VMDR, Tenable/Nessus, or equivalent platforms. Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks. Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact. Work with technology and application teams to coordinate and track vulnerability remediation activities. Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities. Support vulnerability exception/risk acceptance processes and maintain appropriate documentation. Generate vulnerability management dashboards, metrics, and executive-level reports. Investigate emerging vulnerabilities and assess their potential impact on the organization's technology environment. Support vulnerability assessments following major security advisories, zero-day vulnerabilities, and actively exploited vulnerabilities. Identify trends and recurring vulnerabilities and recommend improvements to reduce the organization's overall vulnerability exposure. Assist with vulnerability management process improvements, automation, and optimization of scanning coverage. Maintain accurate records of assets, vulnerabilities, remediation status, and exceptions.

Required Skills & Qualifications

• 3 years of experience in Vulnerability Management, Cybersecurity, Information Security, or a related discipline.
• Hands-on experience with one or more vulnerability management platforms, preferably: Qualys VMDR / Qualys Vulnerability Management, Tenable Vulnerability Management / Nessus, Rapid7 InsightVM or equivalent tools.
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
• Good knowledge of CVSS, CWE, CVE, CPE, vulnerability severity, and risk-based prioritization.
• Understanding of operating systems, networking, databases, web applications, and common enterprise infrastructure technologies.
• Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.
• Strong understanding of patch management and vulnerability remediation processes.
• Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.
• Strong communication, analytical, and stakeholder-management skills.

Preferred Skills & Qualifications

• Experience with vulnerability management across on-premises, cloud, and hybrid environments.
• Knowledge of AWS/Azure/GCP security and cloud vulnerability management.
• Familiarity with CISA KEV, threat intelligence, and actively exploited vulnerabilities.
• Experience with vulnerability remediation tracking and security dashboards.
• Exposure to scripting/automation using Python, PowerShell, or similar technologies.

Day-to-Day Responsibilities

• Perform day-to-day vulnerability management activities across various environments.
• Configure, execute, and monitor vulnerability scans using industry-standard tools.
• Analyze scan results, validate findings, and assess security risks.
• Coordinate and track vulnerability remediation activities with technology teams.
• Monitor remediation progress and escalate overdue or high-risk vulnerabilities.
• Generate reports and dashboards for vulnerability management.
• Investigate emerging vulnerabilities and assess their impact.
• Support assessments following major security advisories and zero-day vulnerabilities.

For immediate consideration please click APPLY to begin the screening process with Alex.