We are looking for a Vulnerability Management Analyst with 2–3 years of experience to support and independently drive day-to-day vulnerability management activities. The ideal candidate should have a solid understanding of vulnerability management, remediation coordination, and security best practices, along with strong communication and organizational skills. The candidate will work closely with infrastructure, application, cloud, and security teams to ensure timely remediation of vulnerabilities while helping improve the overall vulnerability management program.
This role requires someone who can work independently, lead daily operational activities, support onboarding of new security tools, and contribute to process improvements across the team.
Key Responsibilities
Perform vulnerability assessment reviews using Qualys, Nessus, or equivalent vulnerability management platforms.
Analyze vulnerability scan results and validate findings to identify true risk and remediation priorities.
Coordinate with infrastructure, application, cloud, and endpoint teams to drive remediation within defined SLAs.
Track remediation progress and follow up with asset owners until vulnerabilities are resolved.
Review vulnerabilities using CVSS scoring, exploitability, business criticality, and threat intelligence to support risk-based prioritization.
Monitor patch compliance and remediation effectiveness across Windows, Linux, network, and cloud assets.
Prepare operational dashboards, reports, and executive summaries for management.
Maintain accurate documentation of vulnerability findings, remediation activities, exceptions, and risk acceptances.
Support onboarding, testing, and operationalization of new vulnerability management and security tools.
Identify opportunities to improve processes, workflows, reporting, and automation.
Work independently to organize daily team activities and help improve operational efficiency.
Collaborate with Security Operations, Incident Response, Cloud Security, Infrastructure, and Application teams on vulnerability-related investigations.
Participate in vulnerability review meetings and communicate technical findings to both technical and non-technical stakeholders.
Required Skills
2–3 years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
Good understanding of vulnerabilities, CVEs, CVSS scoring, and risk prioritization.
Hands-on experience with vulnerability scanning tools such as:
Qualys
Nessus
Tenable
Good understanding of:
Windows Server
Linux
Networking fundamentals
Servers and endpoints
Understanding of patch management lifecycle and remediation tracking.
Knowledge of IT infrastructure and asset management.
Good understanding of OWASP Top 10, including:
SQL Injection
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Broken Access Control
Authentication & Authorization issues
Security Misconfiguration
Vulnerable Components
Server-Side Request Forgery (SSRF)
Experience working with ServiceNow or similar ticketing platforms.
Good analytical and troubleshooting skills.
Ability to work independently with minimal supervision.
Leadership & Soft Skills
Excellent verbal and written communication skills.
Strong stakeholder management and coordination skills.
Ability to independently lead remediation discussions with technical teams.
Good organizational and planning skills.
Ability to manage multiple priorities and meet deadlines.
Project coordination skills with the ability to support new security tool onboarding and process improvements.
Self-driven with a continuous improvement mindset.
Comfortable mentoring junior analysts and sharing knowledge within the team.
... financial markets. Founded in 2011, we have gained invaluable experience in the field of High Frequency Trading across different asset classes. We are seeking a Security Analyst to run our SOC and own our compliance with SEBI's Cybersecurity and Cyber Resilience Framework (CSCRF), including all regulatory reporting and documentation, ...
Job Summary We are looking for an experienced Security Analyst with 4–5 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) across web applications, APIs, Android applications (APK), iOS applications (IPA), and IT infrastructure. The candidate should have strong expertise in identifying, ...
We're looking for a Senior Security Analyst in Pune to help protect TomTom's global environment from evolving cyber threats. You'll drive incident response, threat hunting, and detection engineering initiatives while working with a highly skilled and collaborative security team. What You'll Do - Monitor, triage, investigate, ...
... Mentor and coach L1 analysts, run shift handovers and knowledge-sharing sessions. - Provide evidence and support for ISO 27001, ISO/IEC 42001 and customer security audits. Required qualifications - Bachelor's degree in Computer Science, IT, Cybersecurity or equivalent practical experience. - 5–8 years in information security, ...
Job Description : - 4 - 7+ years of experience in Cybersecurity / SOC Operations- Hands-on experience with Covalence by Field Effect (preferred, not mandatory)- Strong understanding of SIEM, EDR, XDR, and threat intelligence tools- Experience working with international/global clients- Knowledge of network security, firewalls, ...
... security. You will join the Information Security and Compliance team and apply your engineering skills to practical cyber security work, including software security reviews, vulnerability management, penetration testing, risk assessments, automation, cloud configuration reviews and security administration. The role is designed ...
... colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars. Could you be the full-time Network Security Analyst in Bangalore we’re looking for? OVERALL PURPOSE OF THE ROLE: - Reporting directly to the Network Security Manager, the Network Security Analyst will ...
... Collaborative, yet capable of deep focus and individual contribution. Preferred Education and Certifications: • Bachelor's degree or relevant qualification Cybersecurity, Information Technology, or a related field • Certifications: GCIH, GIAC, CEH, Microsoft Security Operations Analyst (SC-200), or equivalent. [{"name": "full_time", ...
Job Summary We are looking for a highly skilled Senior Security Analyst with 6–7 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) across web applications, APIs, mobile applications (Android/iOS), internal and external infrastructure, and AI-powered applications. The candidate must ...
... organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. Great Place to Work® Certified™ About the Job: Security Analyst II is responsible for providing security solutions to clients. The Security Analyst II will demonstrate the capacity to consistently meet and exceed ...