Senior Vulnerability Management Analyst

Job Title: Senior Vulnerability Management Analyst - 86515
Job ID: 90346
Location: Montreal, Quebec/ Remote


What you will be doing:

• Lead enterprise vulnerability management activities across on-premises, cloud, and hybrid environments.

• Conduct vulnerability assessments and analyze scan results from multiple security platforms.

• Validate, prioritize, and classify vulnerabilities based on risk, exploitability, business impact, and threat intelligence.

• Partner with infrastructure, application, cloud, and operations teams to coordinate remediation activities.

• Track and report remediation progress against established service level agreements (SLAs).

• Develop risk-based vulnerability prioritization methodologies and processes.

• Investigate emerging threats and assess exposure to newly disclosed vulnerabilities and zero-day exploits.

• Produce executive and operational reporting, dashboards, and metrics related to vulnerability management performance.

• Support security audits, regulatory compliance requirements, and risk assessments.

• Maintain and optimize vulnerability scanning tools and related integrations.

• Provide technical guidance and mentorship to junior analysts and security team members.

• Contribute to continuous improvement initiatives, automation efforts, and vulnerability management program maturity.

What you must have:

• Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent professional experience).

• Experience: 5+ years of cybersecurity experience, with at least 3 years specifically focused on vulnerability management.

• Technical Proficiency: Hands-on experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or similar.

• Methodology: Strong understanding of CVSS, EPSS, KEV catalogs, and vulnerability prioritization methodologies.

• Environments: Experience working with Windows, Linux, networking, cloud, and containerized environments.

• Compliance: Knowledge of security frameworks such as NIST CSF, CIS Controls, ISO 27001, or PCI DSS.

• Soft Skills: Strong analytical, problem-solving, and risk assessment skills; excellent written and verbal communication skills; ability to present technical findings to both technical and executive audiences.

• Stakeholder Management: Experience supporting remediation programs and managing cross-functional stakeholder relationships.

Thank you for your interest in this opportunity. If you are selected to move forward in the process, we will contact you directly. If you do not hear from us, we encourage you to continue visiting our website for other roles that may be a good fit.


For more information about TEEMA and to consider other career opportunities, please visit our website at www.teemagroup.com