Int. Security Operations Analyst (Vulnerability & Threat Management) to oversee Pen testing and remediation efforts for our payments client

Int. Security Operations Analyst (Vulnerability & Threat Management) to oversee Pen testing and remediation efforts for our payments client

Type: Permanent/FTE

Location: Toronto (West-end) - Hybrid, 3x/week

As the Analyst, Security Operations (Vulnerability & Threat Management), you will organize and oversee penetration testing, coordinate remediation efforts, conduct vulnerability scans, and prepare detailed security reports. You will have a strong technical background in vulnerability management and a strategic mindset for improving security processes.

Responsibilities:

• Organize and manage third-party penetration testing efforts, ensuring proper scoping, scheduling, execution, and review of findings.
• Partner with multiple teams across the organization and 3rd party service provider to map, track, monitor and communicate progress on remediation activities.
• Generate and present vulnerability reports for stakeholders, providing insights and recommendations for improved security practices.
• Recommend and implement automation techniques to enhance vulnerability scanning and remediation processes.
• Act as a subject matter expert and advise other members of the organization on the best practices that should be followed in vulnerability and risk management.
• Identify gaps and support action plans to strengthen Vulnerability Management control efficiency.

Must Haves:

• Bachelor's degree in Cybersecurity, or equivalent work experience.
• 3+ years of proven professional experience in Cyber Security and Vulnerability Management.
• Familiarity with vulnerability assessment platforms (e.g., Rapid7 Insight VM, Nessus, Qualys and others).
• Familiarity with vulnerability management standards (e.g., NVD, CVE, CVSS, CWE, OWASP and others).
• Strong communication skills to interface with stakeholders and management.
• Team player, adaptable, and willing to take on new challenges and learn new technologies.
• Knowledge of security controls/mechanisms and threat/risk assessment techniques.