Vulnerability Management Security Analyst

Job

Job Title:

Vulnerability Management Security Analyst

Contract Length: 24+ Months

Location:

On-site in Ottawa, ON

Federal Government Clearance Level

Required:

Top Secret Clearance

• New Position

Maplesoft Group is currently seeking a Vulnerability Management Security Analyst for a contract opportunity. This is an on-site role in Ottawa, ON.

The Vulnerability Management Security Analyst will be responsible for supporting enterprise vulnerability management activities, including identifying, assessing, prioritizing, tracking, and reporting security vulnerabilities across IT environments. The successful candidate will work with technical teams to investigate vulnerabilities, coordinate remediation activities, assess risk, and support ongoing improvements to the organization's security posture.

• Perform vulnerability assessments and analysis across enterprise IT environments
• Identify, validate, assess, and prioritize vulnerabilities based on risk and potential business impact
• Monitor vulnerability scanning results and investigate identified security weaknesses
• Coordinate with infrastructure, application, network, and security teams to support vulnerability remediation
• Track remediation activities and ensure vulnerabilities are addressed within established timelines
• Conduct vulnerability validation and follow-up testing to confirm remediation
• Analyze vulnerability trends and prepare reports, dashboards, and metrics for stakeholders
• Perform risk assessments and provide recommendations for mitigating identified vulnerabilities
• Support the development and maintenance of vulnerability management processes, procedures, and documentation
• Investigate false positives and determine appropriate remediation or exception requirements
• Maintain accurate vulnerability records and ensure security findings are properly documented
• Support security incident investigations and other cybersecurity activities as required
• Stay current with emerging vulnerabilities, threats, exploits, and security advisories
• Provide technical guidance and recommendations to stakeholders regarding vulnerability remediation
• Contribute to continuous improvement of vulnerability management processes and security controls

• Active Government of Canada Top Secret Clearance
• Experience in vulnerability management and cybersecurity operations
• Experience conducting vulnerability assessments and analyzing vulnerability scan results
• Experience with vulnerability scanning and management tools
• Strong understanding of vulnerability risk assessment and remediation prioritization
• Experience tracking and coordinating vulnerability remediation activities
• Knowledge of common vulnerabilities, exploits, CVEs, and security threats
• Experience preparing vulnerability management reports, metrics, and dashboards
• Strong understanding of enterprise IT infrastructure, networks, operating systems, and applications
• Experience validating vulnerability remediation and investigating false positives
• Strong analytical, problem-solving, documentation, and communication skills

• Experience with enterprise vulnerability management platforms such as Tenable, Qualys, or Rapid7
• Experience with Security Information and Event Management (SIEM) solutions
• Knowledge of CVSS scoring and vulnerability risk-rating methodologies
• Experience working within Government of Canada or other highly regulated environments
• Knowledge of security frameworks and standards such as NIST, CIS, ISO 27001, or ITIL
• Experience with vulnerability management automation and reporting
• Relevant cybersecurity certifications such as CISSP, CISM, Security+, CEH, or equivalent

Salary Range: $100.00 - $110.00 / hour

Our recruitment process is led by human recruiters who review all applications and make the final hiring decisions. We use AI-assisted tools to help screen and organize applications. These tools do not replace human judgment, and all hiring decisions are made by people. Please note that data collected by the Company may be stored or processed on servers located outside of Canada.

Maplesoft is an equal opportunity employer and welcomes applications from all qualified candidates. Accommodations are available upon request throughout the recruitment process.