We are looking for a Vulnerability Management Analyst with 2–3 years of experience to support and independently drive day-to-day vulnerability management activities. The ideal candidate should have a solid understanding of vulnerability management, remediation coordination, and security best practices, along with strong communication and organizational skills. The candidate will work closely with infrastructure, application, cloud, and security teams to ensure timely remediation of vulnerabilities while helping improve the overall vulnerability management program.
This role requires someone who can work independently, lead daily operational activities, support onboarding of new security tools, and contribute to process improvements across the team.
Key Responsibilities
Perform vulnerability assessment reviews using Qualys, Nessus, or equivalent vulnerability management platforms.
Analyze vulnerability scan results and validate findings to identify true risk and remediation priorities.
Coordinate with infrastructure, application, cloud, and endpoint teams to drive remediation within defined SLAs.
Track remediation progress and follow up with asset owners until vulnerabilities are resolved.
Review vulnerabilities using CVSS scoring, exploitability, business criticality, and threat intelligence to support risk-based prioritization.
Monitor patch compliance and remediation effectiveness across Windows, Linux, network, and cloud assets.
Prepare operational dashboards, reports, and executive summaries for management.
Maintain accurate documentation of vulnerability findings, remediation activities, exceptions, and risk acceptances.
Support onboarding, testing, and operationalization of new vulnerability management and security tools.
Identify opportunities to improve processes, workflows, reporting, and automation.
Work independently to organize daily team activities and help improve operational efficiency.
Collaborate with Security Operations, Incident Response, Cloud Security, Infrastructure, and Application teams on vulnerability-related investigations.
Participate in vulnerability review meetings and communicate technical findings to both technical and non-technical stakeholders.
Required Skills
2–3 years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
Good understanding of vulnerabilities, CVEs, CVSS scoring, and risk prioritization.
Hands-on experience with vulnerability scanning tools such as:
Qualys
Nessus
Tenable
Good understanding of:
Windows Server
Linux
Networking fundamentals
Servers and endpoints
Understanding of patch management lifecycle and remediation tracking.
Knowledge of IT infrastructure and asset management.
Good understanding of OWASP Top 10, including:
SQL Injection
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Broken Access Control
Authentication & Authorization issues
Security Misconfiguration
Vulnerable Components
Server-Side Request Forgery (SSRF)
Experience working with ServiceNow or similar ticketing platforms.
Good analytical and troubleshooting skills.
Ability to work independently with minimal supervision.
Leadership & Soft Skills
Excellent verbal and written communication skills.
Strong stakeholder management and coordination skills.
Ability to independently lead remediation discussions with technical teams.
Good organizational and planning skills.
Ability to manage multiple priorities and meet deadlines.
Project coordination skills with the ability to support new security tool onboarding and process improvements.
Self-driven with a continuous improvement mindset.
Comfortable mentoring junior analysts and sharing knowledge within the team.
... SOC2. Technical compliance to regulatory framework like Internation Standard on Quality Management (ISQM) is also a responsibility of the team. An Information Security Analyst will work closely with team leads to assist with one of the security functional areas described above. Your key responsibilities - Create creating various ...
Key Responsibilities, Deliverables / Outcomes As a Security Analyst specializing in Web Penetration Testing, you will assist in identifying vulnerabilities and assessing the security posture of web applications. You will work closely with senior team members to enhance your skills, perform web penetration testing, and contribute ...
... assessments of Android, iOS, and hybrid mobile applications. The role requires strong hands-on experience in mobile application penetration testing, mobile platform security, API security, and secure mobile application architecture reviews. The consultant will conduct comprehensive manual security testing, identify security vulnerabilities, ...
... you. Role location: Pune - Hybrid (three days in-office, two days virtual) About the role As an Analyst II, Information Security, you’ll support information security management system (ISMS), privacy, risk management and compliance activities. You’ll lead audit engagements, assess information security risks and work with ...
... loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Join the Bloomreach GIST (Global Information Security & Technology) team as an Associate Security Analyst and help protect our e-commerce environment from threats, vulnerabilities, and sophisticated attackers. ...
Cyber Security Analyst Position Description Cyber Security Analyst Missions . · Implementation and regular management of the reporting and dashboards associated with the following activities (listed below); . · Run controls and process accesses according to security procedures; . · Implement control measures to identify ...
... performing stocks in Europe over the past 20 years Job Description As a Information Security Analyst , you will support SOC Incident Respond crew in providing security monitoring and react timely to security events as identified. The role requires solid understating of basic cybersecurity concepts and strong analytical mind. ...
Bangalore, भारत
View vacancy
Staples India Business Innovation Hub Private Limited
Role Summary The Security Analyst should work as a support analyst for the Saviynt IGA solution, key delivery outcomes expected from this role are: • Analyze and resolve L2 tickets • Application Onboarding – Standard pattern of applications leveraging out of the box connectors • Access certification campaign – Configure ...
Senior Information Security Analyst role focused on service delivery management and security operations at Eurofins' Bangalore office. Responsible for managing security service delivery to internal stakeholders, overseeing onboarding programs, and ensuring compliance with SLAs and security standards. Responsibilities - ...