Vulnerability Management Security Analyst

1 day ago

Montreal, Quebec, Canada Harbor Full-time

Administer Qualys and strengthen Harbor's security posture as a fully remote Security Analyst supporting Canada or the Philippines during United States EST hours.

Harbor's internal IT Operations team needs a Security Analyst with four or more years in information security, cybersecurity, or related work. The position emphasizes vulnerability management, third-party risk management, and client-facing security assurance. You will analyze scan results, coordinate remediation, manage vendor reviews, and answer security questionnaires. Familiarity with network security, risk principles, and frameworks including SOC 2 or ISO 27001 supports the work.

Key Responsibilities:

  • Operate Qualys across infrastructure, endpoints, and cloud environments
  • Prioritize vulnerabilities and coordinate remediation with technical teams
  • Track remediation and produce leadership dashboards and metrics
  • Manage vendor assessments, reviews, and risk inventory
  • Respond to client questionnaires, RFPs, and due diligence requests

Requirements:

  • Four or more years in information security or related work
  • Hands-on vulnerability management experience, preferably with Qualys
  • Experience answering client security questionnaires or audit requests
  • Foundational knowledge of firewalls, SIEM, IDS/IPS, and endpoint protection
  • Familiarity with third-party risk management principles

Apply vulnerability analysis, remediation tracking, and security assurance expertise to strengthen Harbor's internal security operations and governance.