Cyber Assurance Analyst

Key Responsibilities:
1. Perform vulnerability assessments across servers, endpoints, network devices, and cloud environments using Nessus SC and Nessus IO (Tenable).
2. Analyse scan results, validate vulnerabilities, and prioritize remediation based on CVSS score, asset criticality, and business impact
3. Coordinate with infrastructure, application, and cloud teams for timely remediation and closure of vulnerabilities.
4. Maintain vulnerability management documentation, procedures, and remediation guidelines.

Skills expectations -

1. Hands-on experience with Nessus for authenticated and unauthenticated vulnerability scanning.

2. Good understanding of the vulnerability management lifecycle, including identification, validation, prioritization, remediation, and reporting.

3. Knowledge of CVE, CVSS, vulnerability severity ratings, and remediation best practices.

4. Basic understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, SSH, and common network ports.

5. Ability to analyse scan findings related to network services and connectivity.

6. Familiarity with firewalls, VLANs, and basic routing concepts.

7. Working knowledge of Windows and Linux operating systems.

8. Ability to verify patches, services, and configuration-related vulnerabilities.

9. Experience in preparing vulnerability reports, dashboards, and remediation tracking.

10. Strong analytical, problem-solving, and stakeholder communication skills.

11. Good to have: Working knowledge of automation techniques using API, scripting, CI/CD and orchestration.