Posted 7 days ago
Vulnerability Analyst
@ LanceSoft, Inc.
Montréal, Quebec
Responsibilities:
- Execute day-to-day Vulnerability Management Operations activities.
- Perform vulnerability exposure assessments across cloud and on-premises environments.
- Analyze and prioritize vulnerabilities using CVE, CVSS, threat intelligence, and business risk context.
- Coordinate remediation efforts with infrastructure, cloud, application, and security teams.
- Track vulnerability remediation progress and ensure timely closure of findings.
- Monitor emerging threats, zero-day vulnerabilities, and cybersecurity advisories.
Requirements summary:
- Support after-hours incident response, on-call rotations, and occasional weekend activities as required.
- Required Qualifications
- Must-Have Skills
- 5+ years of experience in Vulnerability Management, Cybersecurity Operations, or Cybersecurity Analytics.
- 5+ years of hands-on experience with:
- Experience with SIEM solutions, preferably Splunk.
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-11-03
- First seen by our source
- 2026-11-10
- Source record updated
- 2026-11-10
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
LanceSoft, Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 6 |
Location: Montreal, QC (Day 1 Onsite | Hybrid - 3 Days/Week In Office)
Duration: 12-Month Contract
Employment Type: Contract
About the Role
We are seeking an experienced Vulnerability Management Operations Analyst to join our Vulnerability Management Operations team. This role will support enterprise-wide vulnerability management initiatives, cloud security exposure assessments, remediation tracking, and cybersecurity analytics. The ideal candidate will possess strong expertise in vulnerability management platforms, security analytics, cloud security tools, and stakeholder engagement.
The successful candidate will play a critical role in identifying, analyzing, prioritizing, and coordinating remediation efforts for vulnerabilities across the organization's technology landscape while providing executive-level reporting and insights.
Key Responsibilities
- Execute day-to-day Vulnerability Management Operations activities.
- Perform vulnerability exposure assessments across cloud and on-premises environments.
- Analyze and prioritize vulnerabilities using CVE, CVSS, threat intelligence, and business risk context.
- Coordinate remediation efforts with infrastructure, cloud, application, and security teams.
- Track vulnerability remediation progress and ensure timely closure of findings.
- Monitor emerging threats, zero-day vulnerabilities, and cybersecurity advisories.
- Utilize Wiz, Prisma Cloud, and Qualys to identify and assess security exposures.
- Leverage Python and automation techniques to streamline vulnerability management processes.
- Analyze security data from Snowflake, PostgreSQL, and other enterprise data sources.
- Collaborate with stakeholders across security, technology, and business teams.
- Support after-hours incident response, on-call rotations, and occasional weekend activities as required.
Required Qualifications
Must-Have Skills
- 5+ years of experience in Vulnerability Management, Cybersecurity Operations, or Cybersecurity Analytics.
- 5+ years of hands-on experience with:
- Wiz
- Prisma Cloud
- Qualys
- Experience with SIEM solutions, preferably Splunk.
- Strong understanding of:
- CVEs
- CVSS Scoring
- Vulnerability Risk Assessment
- Vulnerability Remediation & Mitigation
- Exposure Management
- Experience coordinating remediation efforts across multiple stakeholder groups.
- Strong analytical, organizational, and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to manage multiple priorities in a fast-paced environment.
Nice-to-Have Skills
- Python scripting and security automation.
- Experience with Snowflake and PostgreSQL.
- AI/Agentic AI experience within cybersecurity operations.
- Cloud security experience across AWS, Azure, or GCP.
- Executive reporting and presentation experience.
- Knowledge of threat intelligence platforms and vulnerability prioritization frameworks.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.