ZipRecruiter

Log In

1

Vulnerability Analyst Jobs in Quebec (NOW HIRING)

Alcoa

Cyber Security Risk Analyst

Baie-comeau, QC

Solid understanding of security principles, including security controls, threat modeling, vulnerability management, and incident risk analysis. * Excellent written, verbal, and facilitation skills ...

Alcoa

Cyber Security Risk Analyst

Deschambault, QC

Solid understanding of security principles, including security controls, threat modeling, vulnerability management, and incident risk analysis. * Excellent written, verbal, and facilitation skills ...

Alcoa

Cyber Security Risk Analyst

Montreal, QC

Solid understanding of security principles, including security controls, threat modeling, vulnerability management, and incident risk analysis. * Excellent written, verbal, and facilitation skills ...

Alcoa

Cyber Security Risk Analyst

Becancour, QC

Solid understanding of security principles, including security controls, threat modeling, vulnerability management, and incident risk analysis. * Excellent written, verbal, and facilitation skills ...

Societe Generale

Senior Business Analyst

Montreal, QC ยท On-site

... Analyst. The projects are all technology oriented and aim at providing standard solutions to ... vulnerability management...). WHAT WILL BE YOUR DAY-TO-DAY? In this context, you will oversee the ...

KPMG

Manager - ServiceNow

Montreal, QC

Vulnerability Response (VR): respond efficiently and prioritize vulnerabilities based on business ... Building your technical and analytical expertise by delivering high quality results on time and ...

Galvion

IT Manager

Montreal, QC

... data analytics, and business leadership teams to achieve organizational objectives. SPECIFIC ... Partner with Information Security leadership to support cybersecurity initiatives, vulnerability ...

next page

Showing results 1-20

All JobsVulnerability Analyst JobsVulnerability Analyst Jobs in Quebec

Vulnerability Analyst information

See Quebec salary details

$27

$49

$72

How much do vulnerability analyst jobs pay per hour?

As of Jul 20, 2026, the average hourly pay for vulnerability analyst in Quebec is $49.28, according to ZipRecruiter salary data. Most workers in this role earn between $42.55 and $55.29 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in the Vulnerability Analyst position, and why are they important?

To thrive as a Vulnerability Analyst, you need expertise in cybersecurity principles, risk assessment, and vulnerability management, often supported by a degree in information security or a related field. Familiarity with vulnerability scanning tools (such as Nessus, Qualys, or Rapid7), knowledge of operating systems, and certifications like CompTIA Security+ or CEH are commonly required. Strong analytical thinking, attention to detail, and effective communication skills set top candidates apart. These abilities are crucial for accurately identifying system weaknesses and effectively advising teams on how to remediate security threats.

What are the typical day-to-day responsibilities of a Vulnerability Analyst?

As a Vulnerability Analyst, your daily tasks often include running vulnerability scans, analyzing findings, prioritizing risks based on severity, and working with IT or development teams to coordinate remediation efforts. You will also document your findings, prepare reports for stakeholders, and stay informed about the latest security threats and exploits. Collaboration with other security professionals and IT staff is common, as resolving vulnerabilities often requires cross-functional teamwork. This role requires a balance of technical analysis and effective communication to ensure organizational security posture is continuously improved.

What is a Vulnerability Analyst job?

A Vulnerability Analyst is a cybersecurity professional responsible for identifying, assessing, and mitigating security weaknesses in an organization's systems, networks, and applications. They use tools like vulnerability scanners, penetration testing frameworks, and security assessments to identify potential threats. Their role includes analyzing vulnerabilities, prioritizing risks, and working with IT and security teams to implement necessary patches or fixes. They also stay up to date with emerging threats and ensure compliance with security policies and regulations.

What are popular job titles related to Vulnerability Analyst jobs in Quebec? For Vulnerability Analyst jobs in Quebec, the most frequently searched job titles are:
What job categories do people searching Vulnerability Analyst jobs in Quebec look for? The top searched job categories for Vulnerability Analyst jobs in Quebec are:
Vulnerability Analyst jobs near you
Infographic showing various Vulnerability Analyst job openings in Quebec as of July 2026, with employment types broken down into 88% Full Time, 6% Temporary, and 6% Contract. Highlights an 70% In-person, 13% Hybrid, and 17% Remote job distribution, with an average salary of $102,493 per year, or $49.3 per hour.
Cyber Security Analyst II

Cyber Security Analyst II

COMTECH TELECOMMUNICATIONS

Gatineau, QC โ€ข On-site

Full-time

Re-posted 15 days ago

Job description

Job Title: Cyber Security Analyst II

Department: System Engineering

Reports To: Senior Manager, Engineering, Systems

Revision Date: 5/1/2026

Location: Gatineau, QC

Level: P2


Company Overview:

Comtech Telecommunications Corp. is a leading global technology company providing terrestrial and wireless network solutions, next-generation 9-1-1 emergency services, satellite and space communications technologies, and cloud-native capabilities to commercial and government customers around the world. Our unique culture of innovation and employee empowerment unleashes a relentless passion for customer success. With multiple facilities located in technology corridors throughout the United States and around the world, Comtech leverages our global presence, technology leadership, and decades of experience to create the worldโ€™s most innovative communications solutions. For more information, please visit www.comtech.com.

Purpose:

The Cyber Security Analyst II is responsible for our on-premise and cloud deployments emergency call handling solution. The candidate will be responsible for prototyping, testing and automating the deployments of vulnerability mitigation on components used to implement complex telecommunications systems, business applications and networking products.

Responsibilities:

  • Review vulnerability assessment results and penetration test reports; assist in prioritizing findings based on risk.
  • Support the development, validation, and maintenance of deployment scripts used for applying patches, configuration updates, and mitigation steps.
  • Execute repeatable test procedures to confirm that mitigations, patches, and system changes are functioning as expected.
  • Participate in system architecture discussions by contributing security focused observations and implementation considerations.
  • Analyze system specifications to identify potential security gaps, misconfigurations, or integration issues.
  • Assist in defining system requirements, integration steps, and qualification tests with a focus on security.
  • Evaluate and integrate third party components (hardware, software, or cloud tools) under the guidance of senior engineers.
  • Follow secure configuration baselines and support the development of system hardening templates or guidelines.
  • Ensure system designs and configuration approaches adhere to recognized industry standards and frameworks, including secure by design principles and best practices for hardening and risk reduction.
  • Conduct system integration tasks and run functional and security related test cases.
  • Help create and update technical documents, deployment procedures, and operational playbooks.
  • Work with Engineering, Cybersecurity, and Operations teams to implement solutions, resolve issues, and respond to emerging vulnerabilities or incidents.
  • Assist in troubleshooting customer impacting problems by analyzing logs, configurations, and behavior across systems and networks.
  • Stay informed on new vulnerabilities, CVEs, patches, and vendor advisories to support proactive mitigation activities.

Requirements:

  • Ability to understand and assess vulnerabilities, system risks, and remediation steps.
  • Experience working with Windows 10/11 and Windows Server 2016+ in an operational or engineering context.
  • Basic to intermediate experience with Active Directory concepts and management.
  • Experience writing or modifying automation scripts (PowerShell, Python, Bash) to support deployment or testing tasks.
  • Familiarity with containerization and virtualization platforms (Docker, Kubernetes, VMware, KVM).
  • Experience with database systems such as MySQL/MariaDB or PostgreSQL.
  • Hands on experience administering or supporting Linux systems (RHEL, Debian or equivalents).
  • Ability to configure and troubleshoot basic networking devices (switches, routers, firewalls).
  • Solid understanding of networking concepts (OSI Layer 2 & 3, VLANs, routing basics).
  • Experience or interest in VoIP technologies (SIP/RTP) is an asset.
  • Ability to use debugging tools and apply structured troubleshooting methods.
  • Familiarity with vulnerability management tools (Nessus, Qualys, OpenVAS) is an asset.
  • Knowledge of secure configuration frameworks (CIS Benchmarks, NIST guidance).
  • Strong communication skills and ability to work collaboratively within multidisciplinary technical teams.
  • Language: English required; French is an asset

Education:

  • University Graduate degree in Information Technology, Electrical Engineering or Computer Engineering (or equivalent experience)

This position requires compliance with Comtechโ€™s Drug-Free Workplace Program. Candidates must successfully complete a pre-employment drug screening as a condition of hire. Employees may be subject to random, reasonable suspicion, and post-incident testing. Illegal drug use โ€” including marijuana, regardless of state law โ€” is disqualifying under federal adjudicative guidelines and DoD DFARS requirements.

The pay range reflects the expected base salary for this position. Final compensation will be based on role, level, skills, experience, and geographic location.

Comtech Telecommunications Corp. is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability protected veteran status or other characteristics protected by law.โ€ฏ


Titre de poste : Analyste en cybersรฉcuritรฉ II

Dรฉpartement : Gรฉnie des systรจmes

Compte ร  : Gestionnaire principal, Ingรฉnierie, Systรจmes

Date de rรฉvision : 01/05/2026

Emplacement : Gatineau, QC

Niveau : P2

Aperรงu de l'entreprise :

Comtech Telecommunications Corp. est une entreprise technologique mondiale de premier plan offrant des solutions de rรฉseaux terrestres et sans fil, des services d'urgence 9-1-1 de nouvelle gรฉnรฉration, des technologies de communication par satellite et spatiales, ainsi que des capacitรฉs cloud-native ร  des clients commerciaux et gouvernementaux partout dans le monde. Notre culture unique d'innovation et d'autonomisation des employรฉs libรจre une passion infatigable pour la rรฉussite client. Avec de nombreuses installations situรฉes dans des corridors technologiques ร  travers les ร‰tats-Unis et le monde, Comtech met ร  profit sa prรฉsence mondiale, son leadership technologique et des dรฉcennies d'expรฉrience pour crรฉer les solutions de communication les plus innovantes au monde. Pour plus d'informations, veuillez visiter www.comtech.com.

Objectif :

L'analyste en cybersรฉcuritรฉ II est responsable de notre solution de gestion d'appels d'urgence sur site et en nuage. Le candidat sera responsable du prototypage, des tests et de l'automatisation du dรฉploiement de la mitigation des vulnรฉrabilitรฉs sur les composants utilisรฉs pour mettre en ล“uvre des systรจmes complexes de tรฉlรฉcommunications, des applications d'affaires et des produits rรฉseau.

Responsabilitรฉs :

  • Examiner les rรฉsultats d'รฉvaluation de vulnรฉrabilitรฉ et les rapports de tests d'intrusion; Aider ร  prioriser les rรฉsultats selon le risque.
  • Soutenir le dรฉveloppement, la validation et la maintenance des scripts de dรฉploiement utilisรฉs pour appliquer les correctifs, les mises ร  jour de configuration et les รฉtapes d'attรฉnuation.
  • Exรฉcutez des procรฉdures de test rรฉpรฉtables pour confirmer que les mitigations, correctifs et modifications du systรจme fonctionnent comme prรฉvu.
  • Participez aux discussions sur l'architecture systรจme en contribuant ร  des observations axรฉes sur la sรฉcuritรฉ et ร  des considรฉrations d'implรฉmentation.
  • Analysez les spรฉcifications du systรจme pour identifier les รฉventuels รฉcarts de sรฉcuritรฉ, les mauvaises configurations ou les problรจmes d'intรฉgration.
  • Aider ร  dรฉfinir les exigences du systรจme, les รฉtapes d'intรฉgration et les tests de qualification, en mettant l'accent sur la sรฉcuritรฉ.
  • ร‰valuer et intรฉgrer des composants tiers (matรฉriel, logiciel ou outils infonuagiques) sous la supervision d'ingรฉnieurs seniors.
  • Suivez des bases de configuration sรฉcurisรฉes et soutenez le dรฉveloppement de modรจles ou de lignes directrices pour le durcissement du systรจme.
  • Assurez-vous que les conceptions de systรจmes et les approches de configuration respectent les normes et cadres reconnus de l'industrie, y compris les principes sรฉcurisรฉs par conception et les meilleures pratiques pour le renforcement et la rรฉduction des risques.
  • Effectuer des tรขches d'intรฉgration systรจme et exรฉcuter des cas de test fonctionnels et liรฉs ร  la sรฉcuritรฉ.
  • Aider ร  crรฉer et mettre ร  jour des documents techniques, des procรฉdures de dรฉploiement et des manuels opรฉrationnels.
  • Travailler avec les รฉquipes d'ingรฉnierie, de cybersรฉcuritรฉ et d'opรฉrations pour mettre en ล“uvre des solutions, rรฉsoudre des problรจmes et rรฉpondre aux vulnรฉrabilitรฉs ou incidents รฉmergents.
  • Aider ร  dรฉpanner les problรจmes ayant un impact client en analysant les journaux, configurations et comportements ร  travers les systรจmes et rรฉseaux.
  • Restez informรฉ des nouvelles vulnรฉrabilitรฉs, des CVE, des correctifs et des avis aux fournisseurs pour soutenir les activitรฉs d'attรฉnuation proactives.

Exigences :

  • Capacitรฉ ร  comprendre et รฉvaluer les vulnรฉrabilitรฉs, les risques du systรจme et les รฉtapes de remรฉdiation.
  • Expรฉrience de travail avec Windows 10/11 et Windows Server 2016+ dans un contexte opรฉrationnel ou d'ingรฉnierie.
  • Expรฉrience de base ร  intermรฉdiaire avec les concepts et la gestion d'Active Directory.
  • Expรฉrience dans l'รฉcriture ou la modification de scripts d'automatisation (PowerShell, Python, Bash) pour soutenir les tรขches de dรฉploiement ou de test.
  • Familiaritรฉ avec les plateformes de conteneurisation et de virtualisation (Docker, Kubernetes, VMware, KVM).
  • Expรฉrience avec des systรจmes de bases de donnรฉes tels que MySQL/MariaDB ou PostgreSQL.
  • Expรฉrience pratique dans l'administration ou le support de systรจmes Linux (RHEL, Debian ou รฉquivalents).
  • Capacitรฉ ร  configurer et dรฉpanner des dispositifs rรฉseau de base (commutateurs, routeurs, pare-feux).
  • Bonne comprรฉhension des concepts rรฉseau (OSI couches 2 et 3, VLANs, bases du routage).
  • L'expรฉrience ou l'intรฉrรชt pour les technologies VoIP (SIP/RTP) est un atout.
  • Capacitรฉ ร  utiliser des outils de dรฉbogage et ร  appliquer des mรฉthodes de dรฉpannage structurรฉes.
  • La familiaritรฉ avec les outils de gestion des vulnรฉrabilitรฉs (Nessus, Qualys, OpenVAS) est un atout.
  • Connaissance des cadres de configuration sรฉcurisรฉs (benchmarks CIS, directives NIST).
  • Solides compรฉtences en communication et capacitรฉ ร  travailler en collaboration au sein d'รฉquipes techniques multidisciplinaires.
  • Langue : anglais requis; Le franรงais est un atout.

ร‰ducation :

  • Diplรดme universitaire d'รฉtudes supรฉrieures en technologies de l'information, gรฉnie รฉlectrique ou gรฉnie informatique (ou expรฉrience รฉquivalente)

Ce poste exige la conformitรฉ au programme de milieu de travail sans drogue de Comtech. Les candidats doivent rรฉussir un dรฉpistage de drogues prรฉalable ร  l'embauche comme condition d'embauche. Les employรฉs peuvent รชtre soumis ร  des soupรงons alรฉatoires et raisonnables, ainsi qu'ร  des tests post-incident. La consommation illรฉgale de drogues โ€” y compris la marijuana, peu importe la loi provinciale โ€” est disqualifiante selon les directives fรฉdรฉrales et les exigences du DoD DFARS.

La fourchette salariale reflรจte le salaire de base attendu pour ce poste. La rรฉmunรฉration finale sera basรฉe sur le rรดle, le niveau, les compรฉtences, l'expรฉrience et la localisation gรฉographique.

Comtech Telecommunications Corp. est un employeur offrant l'รฉgalitรฉ des chances. Les candidats qualifiรฉs seront considรฉrรฉs pour un emploi sans distinction de race, couleur, religion, sexe, origine nationale, statut de vรฉtรฉran protรฉgรฉ en situation de handicap ou autres caractรฉristiques protรฉgรฉes par la loi.