Vulnerability Scanning Analyst

What is the opportunity?

As a Vulnerability Scanning Analyst, you will be responsible for conducting security scans, identifying vulnerabilities, and working with internal teams to mitigate risks across RBC’s digital ecosystem. You will collaborate with cybersecurity, IT, and business stakeholders to ensure that RBC’s infrastructure remains secure and resilient. Your expertise in security scanning tools and risk analysis will be key to strengthening RBC’s security posture.

What will you do?

• Perform regular vulnerability scanning across RBC’s cloud and on-premise environments to identify potential security threats.

• Analyze scan results, prioritize vulnerabilities, and work with IT and security teams to ensure timely remediation.

• Collaborate with cross-functional teams to integrate vulnerability management best practices into development and deployment pipelines.

• Develop and maintain standard operating procedures (SOPs) for vulnerability scanning and assessment.

• Generate detailed security reports, track remediation efforts, and present findings to management.

• Continuously enhance scanning techniques, improve automation processes, and stay informed about the latest cybersecurity threats.

• Support regulatory and compliance requirements by ensuring security scanning aligns with industry frameworks (e.g., NIST, ISO 27001, PCI-DSS).

What do you need to succeed?

 ​Must-have:

• 2+ years of experience in vulnerability scanning, security analysis, or IT risk management.

• Hands-on experience with security scanning tools such as Tenable Nessus, Qualys, Rapid7, Aqua Security, or similar platforms.

• Strong understanding of network security, system hardening, and cybersecurity frameworks.

• Knowledge of cloud security principles (AWS, Azure, GCP) and container security.

• Experience in analyzing vulnerabilities and providing remediation recommendations.

• Excellent analytical and problem-solving skills, with the ability to interpret complex security data.

• Effective communication and collaboration skills to work with technical and non-technical teams.

Nice-to-have:

• Security certifications such as CISSP, CEH, Security+, or GIAC GSEC.

• Familiarity withDevSecOpspractices and integrating security into CI/CD pipelines.

• Experience working in financial services or a highly regulated industry.

• Proficiency in scripting languages (Python, PowerShell, Bash) for automation.

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.

• Leaders who support your development through coaching and managing opportunities.

• Ability to make a difference and lasting impact.

• Work in a dynamic, collaborative, progressive, and high-performing team.

• A world-class training program in financial services.

#LI-Hybrid

#LI-POST

#TECHPJ