Senior Vulnerability Management Analyst

On behalf of our Healthcare sector client, Affinity is seeking a Senior Vulnerability Management Analyst to take a leading role in the vulnerability management workstream of an enterprise security program. The program’s VM strategy is already defined. This person will run with it: drive remediation across technical teams, improve how vulnerability data from several tools comes together into one workflow, and give senior technical judgment on findings and deliverables. They will also be a dependable senior resource when high-impact vulnerabilities emerge, so the client’s internal security staff can rely on them during urgent events.

Responsibilities Vulnerability management leadership

• Own day-to-day execution of the VM program within the defined strategy, setting priorities and driving work forward with little direction.
• Run, tune and optimize Tenable One scanning across on-premises, Azure and hybrid environments (agent-based, authenticated and network scans).
• Apply risk-based prioritization using CVSS, CISA KEV, EPSS/VPR, exploitability, exposure and asset criticality so limited remediation capacity goes to the highest-value work.
• Validate findings, eliminate false positives and verify remediation through re-scans and evidence review.

Microsoft stack and data integration

• Use Microsoft Defender Vulnerability Management, Defender for Endpoint and Defender for Cloud alongside Tenable.
• Combine vulnerability data from multiple sources into one workflow and reporting model, cutting duplication and closing coverage gaps.
• Recommend improvements to tooling, integrations and ticketing workflows.

Emerging threat response

• Monitor vendor advisories, CISA, the Canadian Centre for Cyber Security and other threat intelligence sources for newly disclosed critical vulnerabilities and zero-days.
• When a major vulnerability is announced, quickly assess exposure, set the response and coordinate urgent remediation with the affected teams.

Remediation and stakeholder engagement

• Work with infrastructure, cloud, application and endpoint teams, including less mature ones, to explain findings, guide fixes and drive remediation to closure.
• Recommend compensating controls where immediate patching isn’t possible.
• Communicate risk clearly to technical teams and leadership.

Quality, reporting and mentorship

• Review and strengthen VM reports, findings and recommendations before they go to the client, ensuring they are technically accurate, well justified and clear.
• Produce operational and executive reporting on exposure trends, remediation SLAs and residual risk.
• Mentor and guide other VM analysts on the team.

Required Qualifications

• 6+ years in vulnerability management, security operations or infrastructure security, including senior or lead-level ownership of VM work in a large enterprise
• Expert, hands-on Tenable One experience (configuration, tuning and reporting)
• Hands-on experience with Microsoft Defender security tools (Defender Vulnerability Management, Defender for Endpoint and/or Defender for Cloud)
• Strong command of CVEs, CVSS, KEV and risk-based prioritization
• Track record of driving remediation across teams you don’t manage
• Proactive awareness of the current threat landscape and experience leading response to critical or zero-day vulnerabilities
• Solid knowledge of networking, Windows/Linux, Active Directory and Azure
• Excellent written and verbal communication, including producing technically rigorous reports and recommendations

Nice-to-Have

• Microsoft certifications such as SC-200, AZ-500 or SC-100
• Tenable certification, CISSP, GIAC or CompTIA CySA+
• Experience integrating vulnerability data into ServiceNow, Jira or Power BI
• Healthcare or other regulated-environment experience

Affinity Earn Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/

About Affinity Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit www.affinity-group.ca

Job Number: 14080