Requisition: 114018
Position: TVM Analyst - Vulnerability Assessment & Management
Type: Contract
Duration: 6-12 Month Contract
Location: Brampton, ON (Hybrid, 2 to 3 days onsite)
MANDATORY
6-8 years of experience in Cybersecurity, Vulnerability Management, Information Security, or a related field.
TVM Analyst responsible for enterprise vulnerability assessment, risk analysis, remediation tracking, reporting, and vulnerability management across infrastructure, applications, endpoints, networks, and cloud environments.
Key Responsibilities
- Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
- Configure, execute, and monitor vulnerability scans using Qualys VMDR, Tenable/Nessus, Rapid7 InsightVM, or similar platforms.
- Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
- Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
- Work closely with infrastructure, security, and application teams to coordinate remediation efforts.
- Monitor vulnerability remediation activities against defined SLAs and escalate overdue or high-risk findings.
- Support vulnerability exception and risk acceptance processes while maintaining proper documentation.
- Develop vulnerability management dashboards, metrics, KPIs, and executive reports.
- Investigate emerging vulnerabilities and assess their impact on the organization's technology environment.
- Support vulnerability assessments related to zero-day threats, major security advisories, and actively exploited vulnerabilities.
- Identify recurring vulnerabilities and recommend security improvements to reduce overall risk exposure.
- Assist with process improvements, automation initiatives, and optimization of vulnerability scanning coverage.
- Maintain accurate records of assets, vulnerabilities, remediation status, and approved exceptions.
Key Skills
- Vulnerability Management
- Vulnerability Assessments
- Qualys VMDR
- Tenable
- Nessus
- Rapid7 InsightVM
- Cyber Security
- Information Security
- CVSS
- CVE
- CWE
- CPE
- Risk Assessment
- Patch Management
- Threat Intelligence
- Security Operations
- Cloud Security
- AWS Security
- Azure Security
- GCP Security
- Security Reporting
- Security Dashboards
- Python
- PowerShell
- Remediation Management
Core Qualifications
- 6-8 years of experience in Cybersecurity, Vulnerability Management, Information Security, or a related field.
- Hands-on experience with vulnerability management platforms including: Qualys VMDR, Tenable Vulnerability Management, Nessus, Rapid7 InsightVM
- Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
- Strong knowledge of: CVSS, CVE, CWE, CPE, Risk-Based Vulnerability Prioritization
- Experience managing vulnerabilities across enterprise environments.
- Strong understanding of: Operating Systems, Networking, Databases, Web Applications, Enterprise Infrastructure
- Experience analyzing vulnerability findings and recommending remediation strategies.
- Strong understanding of patch management and remediation processes.
- Experience translating technical findings into actionable recommendations.
- Excellent analytical, communication, documentation, and stakeholder management skills.
Preferred Qualifications
- Experience supporting vulnerability management across on-premises, cloud, and hybrid environments.
- Knowledge of AWS, Azure, and GCP security services.
- Familiarity with: CISA KEV, Threat Intelligence, Active Exploit Monitoring
- Experience developing vulnerability dashboards and remediation tracking reports.
- Exposure to automation and scripting using: Python, PowerShell
- Experience improving vulnerability management programs and operational processes.
