Vulnerability Management Analyst
Location: Hyderabad & Pune
Experience: 5-8 years
Immediate joiners preferred.
Kindly share resume to [Confidential Information] with Sub of Vulnerability Management along with notice period.
Key Responsibilities:
Vulnerability Management:
- Oversee identification, assessment, remediation, and reporting of vulnerabilities across cloud, on-premises, and OT environments.
- Perform regular scans using Tenable.IO, Tenable.SC, Tenable.CS, and Tenable.OT.
- Interpret scan reports, identify risks, and prioritize remediation efforts.
- Address misconfigurations and vulnerabilities in AWS, Azure, GCP, containers, and OT infrastructure.
- Collaborate with IT and application teams for timely patching and mitigation.
- Manage findings from penetration tests and web application assessments.
- Lead remediation efforts and ensure compliance with industry standards.
- Develop and maintain vulnerability management policies, procedures, and standards.
- Ensure regulatory compliance and process efficiency.
- Work with vendors like Security Scorecard, Lumin, and CES to monitor and improve security posture.
- Enhance processes through automation and integration with other security tools.
- Improve cloud security capabilities and streamline workflows.
- Collaborate with stakeholders to monitor emerging threats and support incident response activities.
- Create reports and presentations for leadership to communicate security posture and progress.
Security Operations Center (SOC):
- Monitor security alerts and incidents using Microsoft Defender or other SIEM tools (e.g., Splunk, Rapid7, Qualys).
- Investigate and respond to security events, including threat hunting and incident response.
- Integrate vulnerability data into SOC workflows for proactive threat management.
- Support perception monitoring and Cyber Essentials certification initiatives.
Required Skills & Experience:
- Proven experience in vulnerability detection, remediation, and threat analysis.
- Hands-on expertise with Tenable tools and other vulnerability scanners.
- Experience with Tenable, Defender, SIEM tools, Email Security and endpoint protection platforms.
- Strong understanding of cloud security, container security, and CSPM.
- Familiarity with tools like Jira, ServiceNow, and Power BI.
- Proficiency in operating systems: Windows, Linux, Unix, Mac, and cloud environments.
- Excellent communication and documentation skills.
Preferred Qualifications:
- Bachelor's degree in Cybersecurity, Information Technology, or related field.
- Certifications such as CompTIA Security plus, CISSP, and CEH would be an advantage.
- Experienced in leading security projects and cross-functional teams.
