Cyber Vulnerability Analyst

About the role

Metrolinx is seeking a Cyber Vulnerability Analyst to protect its technology assets across IT and Operational Technology environments. The role is based onsite at the 277 Front Street office and involves close collaboration with internal teams and external vendors.

Key responsibilities

• Perform vulnerability scanning on networks, operating systems, applications, databases, and OT devices.
• Manage the end‑to‑end vulnerability process, including reporting, escalation of critical findings, and tracking remediation.
• Conduct compliance scanning and enforce configuration hardening according to Metrolinx standards.
• Maintain configuration control of vulnerability management tools and coordinate upgrades.
• Analyze assessment results and threat feeds to respond to security weaknesses.
• Support internal audits, third‑party penetration testing, and incident response activities.
• Collaborate with IT Security Operations, IT Operations, and other business units to develop technical documentation and reports.
• Monitor security alerts and participate in incident management and response.

Required profile

• Proven experience identifying and mitigating cybersecurity vulnerabilities in IT and OT environments.
• Ability to follow structured vulnerability management processes and documentation standards.
• Strong analytical skills to interpret scan results, threat feeds, and audit findings.
• Effective communication and teamwork skills for cross‑functional collaboration.

Required skills