Senior SecOps Analyst

Go RH

Senior SecOps Analyst overseeing end-to-end vulnerability management processes. Collaborating with teams to enhance security measures in a hybrid workplace.

Posted 6/8/2026full-timeMontreal • 🇨🇦 CanadaSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudLinuxPython

About the role

Key responsibilities & impact

Lead the end-to-end vulnerability management process: scans, triage, adaptive prioritization (EPSS, SSVC, CISA KEV), assignment and remediation tracking
Operate and optimize scanning platforms (Tenable, Microsoft Defender for Endpoint) and ensure full asset coverage (on-premises, cloud, containers)
Manage surge patching processes for actively exploited critical vulnerabilities (CISA KEV, zero-days)
Track and report key metrics: MTTR by severity, SLO compliance percentage, scan coverage, volume of exceptions
Maintain the exceptions register and ensure automatic escalation on SLO breaches
Produce dashboards and executive reports
Maintain continuous monitoring of new vulnerabilities, active exploitation campaigns and CERT/CISA advisories
Collaborate with cross-functional teams to coordinate remediation windows
Contribute to the review and evolution of policy DIR12 (Vulnerability Management)
Participate in the implementation of automation and remediation orchestration tools (SOAR)

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering or a related field
Minimum of 5 years’ experience in security operations or vulnerability management
Demonstrated experience with Tenable.io / Tenable.sc, Microsoft Defender or comparable vulnerability platforms
Proficient with Windows Server and Linux operating systems
Familiarity with cloud environments (Azure, AWS) and container technologies, as well as SIEM, EDR and SOAR solutions and their integration
Proficient in Python and PowerShell
Knowledge of NIST CSF, CIS Controls and ITIL frameworks
Ability to produce metrics, KPIs and reports for different audiences
Ability to manage urgent situations and work under pressure during critical vulnerabilities
Fluency in French and English, both spoken and written
Experience with modern prioritization frameworks (EPSS, SSVC, CISA KEV) (major asset)
Experience in regulated environments (finance, insurance, healthcare) (asset)
Relevant certifications such as CISSP, GEVA, CEH, CompTIA CySA+ or equivalent (asset)

Benefits

Comp & perks

Hybrid work model adapted to the role with scheduled office presence
Vacation from the first year
Opportunities for internal advancement
Annual bonus
Group insurance plan (dental, vision and travel insurance)
Defined-benefit pension plan
Employee well-being: $400 wellness account, employee and family assistance program, and telemedicine services

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability managementscanningtriageadaptive prioritizationPythonPowerShellWindows ServerLinuxcloud environmentscontainer technologies

Soft Skills

ability to produce metricsability to manage urgent situationswork under pressurecollaborationcommunication

Certifications

CISSPGEVACEHCompTIA CySA+