Analyst III - Information Security

Role Description Job Title: Security Analyst III Vulnerability Management Location: Any UST location in India Experience: Minimum 5 years of relevant experience Job Summary: We are seeking a highly experienced and knowledgeable Senior Security analyst to join our Vulnerability Management team. The ideal candidate will have extensive experience in cybersecurity, with a deep understanding of vulnerability management processes, tools, and best practices. This role requires strong analytical skills, excellent communication abilities, and a proactive approach to identifying and mitigating security risks.

Key Responsibilities

• Worked in a Vulnerability Management Team and also play the role of SME in Vulnerability management.
• Build the methodologies for Vulnerability Management service using new technologies and AI
• Lead the vulnerability management program, ensuring comprehensive identification, assessment, and remediation of vulnerabilities.
• Develop and implement strategies to enhance the organization's security posture.
• Conduct in-depth vulnerability assessments to identify security weaknesses.
• Develop and improvise methods to detect and analyze vulnerabilities and create reports and dashboards for the customer using Vulnerability management tools like Qualys VMDR, MS Defender, Wiz and CrowdStrike
• Interpret scan results and provide detailed reports with actionable recommendations.
• Prioritize vulnerabilities based on potential impact and likelihood of exploitation.
• Collaborate with technical teams to develop and implement effective remediation plans.
• Stay updated with the latest cybersecurity threats, trends, and technologies.
• Develop and deliver training sessions on vulnerability management best practices.
• Participate in incident response activities, providing expertise in vulnerability exploitation and mitigation.
• Ensure compliance with industry standards and regulatory requirements.

Qualifications

• Bachelor’s degree in computer science, Information Security, or related field.
• Minimum of 5 years of experience in cybersecurity, with a focus on vulnerability management.
• In-depth knowledge of cybersecurity principles, threats, and attack vectors.
• Knowledge of network protocols, architecture, and topologies.
• Extensive experience with various operating systems (Windows, Linux, macOS) and their security configurations.
• Advanced skills in using and configuring vulnerability scanning tools, Qualys VMDR, MS Defender, or CrowdStrike.
• Experience with Rapid7, Tenable, or cloud security is a plus.
• Strong analytical and critical thinking abilities to identify root causes and solutions for vulnerabilities.
• Excellent verbal and written communication skills to effectively communicate with stakeholders.
• Experience in risk assessment methodologies and patch management best practices.
• Automation skills and experience with scripting languages (e.g., Python, PowerShell) are a plus.
• Relevant certifications (e.g., CISSP, CEH, OSCP) are highly desirable.

Skills vulnerability management,nessus,penetration testing,vulnerability scanning,