Senior Analyst, Threat Vulnerability Management

LifeLabs • Toronto, ON

5d • CA$81,431 - CA$103,825

About The Position

Reporting to the Vulnerability Management Manager, the Senior Threat Vulnerability Management Analyst is a subject matter expert that is responsible for leading advanced security assessments, identifying vulnerabilities and threats, and recommending mitigation strategies to enhance LifeLabs cybersecurity posture.

Requirements

• 3+ years of experience in Threat and Vulnerability Management, Information Security, or a related cybersecurity discipline.
• Bachelor’s degree in Computer Science, Information Security, MIS, or a related field, or an equivalent combination of education and experience.
• Strong knowledge of vulnerability management practices, threat analysis, cybersecurity frameworks, security controls, and regulatory requirements.
• Experience with vulnerability management and security tools such as Qualys, CrowdStrike, Wiz, Nmap, EDR, IDS/IPS, SIEM, and related technologies.
• Working knowledge of networking concepts, security protocols, cloud and infrastructure security, firewalls, endpoint protection, and vulnerability remediation practices.
• Familiarity with threat intelligence frameworks and methodologies, including MITRE ATT&CK, Cyber Kill Chain, and risk-based vulnerability prioritization.
• Knowledge of information security governance, privacy regulations, and industry standards such as NIST, ISO 27001, FIPPA, and PIPEDA.
• Strong analytical, investigation, reporting, and problem-solving skills, with the ability to communicate complex technical risks to diverse stakeholders.
• Demonstrated ability to manage competing priorities, work effectively in a fast-paced environment, and collaborate across technical and business teams.

Nice To Haves

• Relevant industry certification preferred (e.g., CISA, CEH, GSEC, SSCP, GCIH).

Responsibilities

• Lead threat and vulnerability management activities, including vulnerability identification, assessment, prioritization, tracking, and remediation across infrastructure, applications, cloud, and endpoint environments.
• Investigate emerging cyber threats, including zero-day vulnerabilities, threat hunting findings, and security incidents, providing risk-based recommendations and escalation as required.
• Conduct vulnerability assessments, security reviews, log analysis, and deep-dive investigations to identify risks, security gaps, and opportunities for improvement.
• Monitor compliance with security policies, standards, regulatory requirements, and industry frameworks, including NIST and other applicable controls.
• Partner with IT, Security Operations (SOC), Governance, Risk & Compliance (GRC), and business stakeholders to communicate risks, prioritize remediation efforts, and strengthen overall security posture.
• Develop, maintain, and enhance threat and vulnerability management standards, processes, procedures, metrics, reporting, and program documentation.
• Support incident response activities, post-incident reviews, and continuous improvement initiatives to reduce future security risks and improve operational effectiveness.
• Track and report on vulnerability management program performance, compliance status, and security metrics, providing regular risk briefings and actionable insights to stakeholders.
• Stay current on emerging threats, vulnerabilities, technologies, and cybersecurity best practices, incorporating new intelligence into vulnerability management activities.
• Provide technical guidance, mentorship, and subject matter expertise to junior analysts and cross-functional teams on vulnerability management and cybersecurity best practices.

Benefits

• Competitive coverage for employees and their families to support their overall health and wellness needs, including Extended Health Care, Dental Care, and Life Insurance.
• Retirement Savings Plan
• Vacation and Wellness Days
• Employee Wellness and Giving Programs: Our award winning mental, physical and financial wellness programs aim to address the comprehensive well-being of our team members, including resources like the Employee & Family Assistance Program, financial planning tools, and employee recognition initiatives.
• Professional development and membership reimbursement, access to preferred rates and discount programs, including WorkPerks, Home and Auto Insurance, Costco Membership, etc., and optional health-related benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior