Back to list

Vacancy description

Information Security Analyst in Pune, भारत

Energy Exemplar

  • On-siteWork from the office

Pune, भारत

About Energy Exemplar

In an era where the world is rapidly advancing towards a cleaner future through decarbonization, Energy Exemplar’s mission lies in ‘Empowering Transformative Energy Decisions’. Founded in 1999 in Adelaide, Australia, our award-winning software portfolio encompassing the modeling and simulation platform PLEXOS®, Aurora, and Adapt2, is trusted by innovative organizations across the globe. Through our technology and people, we strive to enable stakeholders from across the entire energy value chain to revolutionize the energy ecosystem and to collaboratively plan and execute for a sustainable energy future with unprecedented clarity, speed, and innovation. 

Our impact is global and is being recognized across the industry. Some of our recent accolades include:

  • SaaS Company of the Year (2025) – Global Business Tech Awards.
  • Environmental Impact Award (2025) – E+E Leaders Awards.
  • IPPAI (Independent Power Producers Association of India) Power Awards (2025) - Winners
  • Finalist: Platts Global Energy Awards (2024) – Grid Edge category
  • Finalist: Reuters Global Energy Transition Awards (2024) – Technologies of Change
  • Top 50 Marketing Team (2024) – Voted by the public at the ICON Awards.

How We Work

Energy Exemplar is growing fast around 30% year on year and, that growth is driven by how we work. We trust our team to deliver great results from wherever they work best, whether that’s at home, in the office, or on the move.

We’re a global team that values ownership, integrity, and innovation. You’ll be supported to balance work and life in a way that works for you, and empowered to take initiative, solve problems, and make an impact, regardless of your background, location, or role.

Our four core values, Customer Success, One Global Team, Integrity & Ownership, and Innovation Excellence aren’t just words. They show up in how we collaborate, how we solve, and how we grow together.

Role Summary

We are seeking an enthusiastic Information Security Analyst to support Energy Exemplar's Vulnerability Management Program. The primary responsibility of this role is to coordinate and manage vulnerability assessment and penetration testing (VAPT) activities across our cloud, on-premises, and corporate environments. The successful candidate will work closely with internal technology teams, product engineering, cloud operations, IT infrastructure teams, and external VAPT partners to ensure vulnerabilities are identified, assessed, prioritized, tracked, and remediated in accordance with Energy Exemplar's vulnerability management standards and remediation SLAs. The role will also provide operational support for security monitoring activities and gain exposure to SIEM technologies and security operations.

Key Responsibilities

  • Coordinate internal and external Vulnerability Assessment and Penetration Testing (VAPT) activities.
  • Perform authenticated and unauthenticated vulnerability scans using enterprise vulnerability management tools.
  • Review, validate, triage, and prioritize vulnerabilities based on CVSS, exploitability, business impact, and organizational risk.
  • Track vulnerabilities through remediation and verify closure.
  • Monitor compliance with vulnerability remediation SLAs and escalate overdue findings.
  • Work with Product Engineering, Cloud Operations, Infrastructure, IT, and DevOps teams to ensure timely remediation.
  • Coordinate with external penetration testing vendors for scheduled assessments and remediation validation.
  • Prepare vulnerability reports, dashboards, metrics, and executive summaries.
  • Support monthly and quarterly reporting on vulnerability trends, MTTR, backlog, SLA compliance, and remediation effectiveness.
  • Assist in maintaining vulnerability management processes, standards, and documentation.
  • Support security audits including ISO 27001, SOC 2, and customer security assessments by providing evidence related to vulnerability management.
  • Assist in monitoring security events using SIEM platforms and investigate security alerts under the guidance of senior security personnel.
  • Participate in continuous improvement initiatives to enhance Energy Exemplar's security posture.

Required Skills

  • Experience in Vulnerability Assessment and Penetration Testing (VAPT).
  • Basic understanding of network, operating system, and web application security.
  • Familiarity with common vulnerabilities such as those listed in the OWASP Top 10 and Common Weakness Enumeration (CWE).
  • Understanding of CVSS scoring and vulnerability prioritization.
  • Exposure to vulnerability management tools such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar platforms.
  • Basic understanding of cloud security concepts (Azure preferred).
  • Exposure to SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or Microsoft Defender XDR.
  • Familiarity with Windows and Linux operating systems.
  • Good analytical and problem-solving skills.
  • Strong written and verbal communication skills.

Preferred Qualifications

  • 2-4 years of experience in the field of Vulnerability Management.
  • Familiarity with the unique cybersecurity challenges associated with cloud-based energy market applications is a plus.
  • Bachelor's degree in Computer Science, Information Security, or a related discipline.
  • Relevant certifications such as CISSP, CEH (or currently pursuing) are desirable.
  • Exposure to scripting using PowerShell or Python is an advantage.
  • Knowledge of ISO 27001, SOC 2, NIST CSF, or CIS Controls is desirable.

Key Competencies

  • Strong attention to detail.
  • Ability to coordinate with multiple stakeholders.
  • Good organizational and time management skills.
  • Ability to manage multiple remediation activities simultaneously.
  • Willingness to learn new security technologies.
  • Team player with a proactive mindset.

 

Energy Exemplar is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. We welcome applications from people of all backgrounds, experiences, identities, and abilities. Please let us know if you require accommodations at any stage of the recruitment process—we're here to support you in showcasing your full potential.

Energy Exemplar respects your privacy and is committed to protecting the personal data you share during the recruitment process. This Candidate Privacy Notice explains how we collect, use, and protect your personal information when you apply for a role with us.

Similar vacancies

More like this role

  • Hybrid
  • On-site
  • Full-time
  • Cybersecurity
  • Auditing
... love to meet you. Role location: Pune - Hybrid (three days in-office, two days virtual) About the role As an Analyst II, Information Security, you’ll support information security management system (ISMS), privacy, risk management and compliance activities. You’ll lead audit engagements, assess information security risks and ...

Pune, भारत

  • Full-time
  • Cybersecurity

€6515 EUR

... billion, and has been among the best performing stocks in Europe over the past 20 years. Job Description As part of the Threat Hunting function within Eurofins Information Security, you will lead proactive detection of advanced threats by actively searching for adversaries that evade traditional security controls. This role ...

Bangalore, भारत

  • Hybrid
  • Full-time
  • Cybersecurity
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Lead Information Security Analyst (SAP Security) based in India. Take the next step in your cybersecurity career by helping secure complex, business-critical SAP environments within a ...

भारत

  • Data Analytics
... Senior Security Business Analyst role within the Enterprise Security Program is essential for supporting security initiatives by ensuring that business and security requirements are accurately captured, documented, communicated, and managed. The role partners with project stakeholders and Information Security Services to ...

Bangalore, भारत

  • Contract
  • Risk Management
... the organization. Must-Haves - Experience: 3 to 5 years of dedicated experience in IT risk management, cybersecurity, third-party risk management (TPRM), or information security governance. - IT Risk Knowledge: Strong understanding of internal IT general controls (ITGC), access control, disaster recovery, cloud security concepts, ...

Bangalore, भारत

Pylon Management Consulting

Director - Information Security

  • Hybrid
  • Contract
... and automate repetitive controls while retaining appropriate human oversight for high-impact decisions.- Improve Mean Time to Detect, Mean Time to Respond, analyst productivity, investigation quality, and incident-handling consistency.- Ensure that automation and AI capabilities are implemented with security, privacy, ...

Bombay, भारत

  • Risk Management
... Security Specialist, AVP Location: Pune, India Role Description - The Technology Data Innovation (TDI) Chief Security Office (CSO) comprises both Corporate Security and Information Security. We run security operations globally to protect the bank’s people, infrastructure, processes, and information. - CSO Information Security ...

Pune, भारत

SQ1 Security Technology Private Limited

Security Analyst

  • Full-time
... and cached application data for sensitive information exposure. - Identify risks associated with insecure permissions, intent handling, and improper platform security configurations. 4. iOS Application Security Testing (IPA) - Conduct static and dynamic security assessments of iOS applications. - Analyze IPA packages, application ...

Chennai, भारत

Atyeti IT Services Private Limited

Atyeti - Security Analyst

  • Cybersecurity
... resolving issues.Nice-to-Have Qualifications :Certifications :1. ISC2 Certified Information Systems Security Professional (CISSP).2. ISACA Certified in Risk and Information Systems Control (CRISC).3. ISACA Certified Information Systems Auditor (CISA).4. CompTIA Cybersecurity Analyst (CySA+).- Experience with Tugboat Logic/OneTrust ...

Bombay, भारत

McCormick & Company

Security Risk Analyst

  • Hybrid
  • Risk Management

401k

... Overview: The Security Risk Analyst is a key member of the Cybersecurity Governance, Risk, and Compliance team and will report to the Senior Manager, Cybersecurity Governance, Risk & Compliance. This position will be responsible for assessing security risk, establishing security standards, and ensuring compliance against ...

Gurgaon, भारत

Netrix Global

Security Analyst II

  • Remote
  • Full-time
  • Cybersecurity
... - Mentor junior analysts and foster a collaborative, high-performing team culture. What You Will Bring to The Table - 4+ years of experience in Information Security or related cybersecurity roles. - Hands-on experience working in a SOC environment , with strong exposure to SIEM, endpoint, and network security technologies ...

Pune, भारत