Job DescriptionThe OpportunityWe are seeking an experienced and motivated Vulnerability Management Analyst to support the organization's cybersecurity and risk management objectives by identifying, assessing, prioritizing, and tracking security vulnerabilities across enterprise technology environments. The successful candidate will play a key role in the day-to-day execution of the vulnerability management program by partnering with infrastructure, cloud, application, and operational teams to ensure vulnerabilities are effectively assessed and remediated.
What to Expect- Vulnerability Identification and Assessment
- Perform regular vulnerability assessments across enterprise servers, workstations, cloud environments, applications, databases, and network infrastructure.
- Review and analyze vulnerability scan results to identify security weaknesses and determine business impact.
- Validate vulnerabilities and assist in identifying false positives.
- Assess vulnerability severity using CVSS and threat intelligence.
- Monitor security advisories and emerging threats.
- Coordinate remediation activities, track service levels, validate fixes, document exceptions and risk acceptances.
- Prioritize vulnerabilities based on severity, exploitability, asset criticality, and business impact; escalate high-risk findings.
- Reporting and Metrics
- Produce reports, dashboards, KPIs and trend analysis.
What you Bring- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline (or equivalent experience).
- 3-5 years of experience in Cybersecurity, Vulnerability Management, Information Security, Security Operations, or Infrastructure Security.
- Experience with Windows and Linux environments and cross-functional remediation efforts.
- Ability to communicate technical security findings effectively.
- Experience with PowerShell, Python, or Bash scripting
- Threat intelligence familiarity
Salary Range: $108,700-$158,700
Interested in this role, but don't meet every requirement? We encourage you to apply! We know from experience that a candidate doesn't need 100% of the qualifications listed to bring incredible value to our team. We're actively seeking diverse backgrounds and perspectives to help us make insurance better. At Definity, inclusion, diversity, and equity aren't just "nice to have" - they're essential to our success.
What's in it for you?- Hybrid work schedule for most roles
- Company share ownership program
- Incentive Program - Eligible employees may participate in various incentive plans which are paid out at the discretion of the company and subject to individual and company performance.
- Pension and savings programs, with company-matched RRSP contributions
- Paid volunteer days and company matching on charitable donations
- Educational resources, tuition assistance, and paid time off to study for exams
- Focus on inclusion with employee groups, support for gender affirmation surgery, access to BIPOC counsellors, access to programs for working parents
- Wellness and recognition programs
- Discounts on products and services
Go ahead and expect a lot - you deserve it.#LI-Hybrid
About the TeamDefinity is the parent company to some of Canada's most long-standing and innovative insurance brands, including Economical Insurance, Sonnet Insurance, Family Insurance Solutions, and Petline Insurance. Our ambition is to be one of Canada's leading and most innovative property and casualty insurers. We can't do that without our people, so we embrace and encourage a culture that's collaborative, ambitious, rewarding, and empowering.
We offer a flexible, hybrid work experience where employees work from the office and virtually depending on the type of work they are doing and who they are working with. Bring your true self and be a part of our journey. It's better here.
