Cybersecurity Analyst - Vulnerability Management

Job Description

Cybersecurity Analyst - Vulnerability Management
On behalf of our technology client, Procom is searching for a Cybersecurity Analyst - Vulnerability Management for a 6 month contract role. This position is a hybrid position with 3 days onsite at our client’s Montreal office.

Cybersecurity Analyst - Vulnerability Management - Job Description:
The Cybersecurity Analyst will be responsible for driving the vulnerability management program forward, with an immediate focus on reducing the existing vulnerability backlog across endpoints, servers, and applications. As the program matures, the role will expand into broader cybersecurity operations.

Cybersecurity Analyst - Vulnerability Management - Responsibilities:
• Execute and manage continuous vulnerability scanning across enterprise assets using CrowdStrike Exposure Management and supporting tools
• Analyze, validate, and prioritize findings using risk-based criteria such as CVSS, exploit maturity, asset criticality, and exposure
• Coordinate remediation efforts with IT Infrastructure, Application, and Platform teams, ensuring progress is tracked, SLAs are enforced, and fixes are verified
• Maintain vulnerability dashboards, KPIs, and executive-level reporting on backlog reduction
• Manage remediation workflows via ServiceNow, including tickets, change requests, and tracking
• Monitor threat intelligence feeds and vendor advisories for emerging risks
• Support audit evidence requirements for SOX ITGC and ISO 27001

Cybersecurity Analyst - Vulnerability Management - Mandatory Skills:
• 3–5 years hands-on experience in vulnerability management or security operations
• Experience with vulnerability scanning platforms such as CrowdStrike, Tenable, Qualys, or Rapid7
• Working knowledge of Windows Server, Linux, networking, and cloud fundamentals
• Familiarity with CVSS, risk prioritization, and patch management workflows
• Strong analytical skills with the ability to translate technical findings into actionable remediation guidance
• Experience with ServiceNow
• Bilingual in English and French

Cybersecurity Analyst - Vulnerability Management – Nice-to-Have Skills:
• Relevant certification such as CySA+, CEH, GEVA, or equivalent
• Experience in broader cybersecurity operations
• Strong problem-solving skills
• Excellent communication skills
• Teamwork-oriented mindset

Cybersecurity Analyst - Vulnerability Management – Assignment Length:
This is a 6 month contract position.

Cybersecurity Analyst - Vulnerability Management - Start Date:
ASAP.

Cybersecurity Analyst - Vulnerability Management - Assignment Location:
Montreal, Quebec, Canada. This is a hybrid role requiring 3 days in the office.