Request ID: 114018 - TVM Analyst - Vulnerability Assessment & Management

Job Description

TVM Analyst responsible for enterprise vulnerability assessment, risk analysis, remediation tracking, reporting, and vulnerability management across infrastructure, applications, endpoints, networks, and cloud environments.

Location

Brampton, ON - Hybrid (2-3 Days WFO)

Contract Duration

6-12 Month ContractKey Responsibilities

• Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
• Configure, execute, and monitor vulnerability scans using Qualys VMDR, Tenable/Nessus, Rapid7 InsightVM, or similar platforms.
• Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
• Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
• Work closely with infrastructure, security, and application teams to coordinate remediation efforts.
• Monitor vulnerability remediation activities against defined SLAs and escalate overdue or high-risk findings.
• Support vulnerability exception and risk acceptance processes while maintaining proper documentation.
• Develop vulnerability management dashboards, metrics, KPIs, and executive reports.
• Investigate emerging vulnerabilities and assess their impact on the organization's technology environment.
• Support vulnerability assessments related to zero-day threats, major security advisories, and actively exploited vulnerabilities.
• Identify recurring vulnerabilities and recommend security improvements to reduce overall risk exposure.
• Assist with process improvements, automation initiatives, and optimization of vulnerability scanning coverage.
• Maintain accurate records of assets, vulnerabilities, remediation status, and approved exceptions.

Core Qualifications

• 6-8 years of experience in Cybersecurity, Vulnerability Management, Information Security, or a related field.
• Hands-on experience with vulnerability management platforms including:
• Qualys VMDR
• Tenable Vulnerability Management
• Nessus
• Rapid7 InsightVM
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
• Strong knowledge of:
• CVSS
• CVE
• CWE
• CPE
• Risk-Based Vulnerability Prioritization
• Experience managing vulnerabilities across enterprise environments.
• Strong understanding of:
• Operating Systems
• Networking
• Databases
• Web Applications
• Enterprise Infrastructure
• Experience analyzing vulnerability findings and recommending remediation strategies.
• Strong understanding of patch management and remediation processes.
• Experience translating technical findings into actionable recommendations.
• Excellent analytical, communication, documentation, and stakeholder management skills.

Preferred Qualifications

• Experience supporting vulnerability management across on-premises, cloud, and hybrid environments.
• Knowledge of AWS, Azure, and GCP security services.
• Familiarity with:
• CISA KEV
• Threat Intelligence
• Active Exploit Monitoring
• Experience developing vulnerability dashboards and remediation tracking reports.
• Exposure to automation and scripting using:
• Python
• PowerShell
• Experience improving vulnerability management programs and operational processes.

Key Skills

• Vulnerability Management
• Vulnerability Assessments
• Qualys VMDR
• Tenable
• Nessus
• Rapid7 InsightVM
• Cyber Security
• Information Security
• CVSS
• CVE
• CWE
• CPE
• Risk Assessment
• Patch Management
• Threat Intelligence
• Security Operations
• Cloud Security
• AWS Security
• Azure Security
• GCP Security
• Security Reporting
• Security Dashboards
• Python
• PowerShell
• Remediation Management