Security Analyst

Role Overview

Zee is looking for a motivated and hands-on Cyber Security Analyst - Vulnerability Management & Threat Intelligence Specialist to join our growing cybersecurity team.

In this role, you will be responsible for managing the end-to-end vulnerability management lifecycle and driving actionable threat intelligence to proactively reduce risk across enterprise environments.

The ideal candidate will have strong hands-on experience with vulnerability assessment tools, threat intelligence platforms, security analytics, and automation, along with a proactive security mindset.

Key Responsibilities

Vulnerability Management

- Own and enhance the vulnerability management program across network, server, cloud, and application environments.

- Perform regular vulnerability assessments using tools such as Qualys and other industry-standard scanners.

- Analyze scan results and prioritize vulnerabilities based on risk, exploitability, business impact, and threat context.

- Work closely with infrastructure, cloud, application, and DevOps teams to drive timely and effective remediation.

- Develop, review, and maintain vulnerability management policies, procedures, and SLAs.

- Validate remediation through re-scans and continuous monitoring.

Threat Intelligence & Threat Hunting

- Monitor, analyze, and investigate emerging cyber threats, vulnerabilities, and attack trends using CloudSEK, Mandiant, and other threat intel sources.

- Conduct dark web and OSINT monitoring to identify data leaks, credential exposure, brand abuse, or targeted threats.

- Correlate threat intelligence with internal security events using SIEM platforms in collaboration with the SOC team.

- Support proactive threat-hunting activities leveraging frameworks such as MITRE ATT&CK.

- Analyze IoCs and translate them into detection and prevention use cases.

Security Automation & Engineering

- Assist in automating vulnerability management and threat intelligence workflows using SOAR platforms and scripting (Python/PowerShell preferred).

- Leverage AI/ML-based security tools where applicable to improve detection, enrichment, prioritization, and reporting.

- Integrate threat intelligence feeds with SIEM, SOAR, EDR, and other security tools.

Web Application & WAF Security

- Support Web Application Firewall (WAF) operations, including rule tuning, false-positive analysis, and incident investigation.

- Collaborate with application security teams to align WAF controls with application-level risks and vulnerabilities.

Reporting & Stakeholder Management

- Prepare and present clear, risk-based reports on vulnerability posture, remediation status, and threat landscape for senior management.

- Provide actionable intelligence briefings highlighting emerging threats and potential business impact.

- Act as a trusted security advisor to internal stakeholders.

Required Skills & Qualifications

- 2-5 years of hands-on experience in Vulnerability Management, Threat Intelligence, or SOC operations.

- Strong experience with Qualys (or similar vulnerability management platforms).

- Hands-on experience with threat intelligence platforms such as CloudSEK, Mandiant, Recorded Future, or equivalent.

- Working knowledge of SIEM tools and security event analysis.

- Understanding of MITRE ATT&CK, cyber kill chain, and attacker TTPs.

- Basic scripting or automation experience (Python, PowerShell, or similar).

- Familiarity with WAF technologies and web application security concepts.

- Good understanding of networking, operating systems, and common vulnerabilities (OWASP Top 10, CVEs, CWEs).

- Strong analytical, documentation, and communication skills.

Good to Have (Added Value)

- Security certifications are a strong plus, such as:

- CEH, Security+, GSEC

- Vendor-specific certifications (Qualys, cloud security, SIEM, WAF)

- Exposure to cloud security (AWS / Azure / GCP) environments.

- Experience integrating or using AI/ML-driven security platforms for risk prioritisation or threat detection.

- Experience with SOAR platforms and playbook development.

- Prior experience in a media, OTT, or large-scale enterprise environment.

Why Join Zee

- Opportunity to work in a large, complex, and high-visibility environment.

- Hands-on exposure across vulnerability management, threat intelligence, automation, and WAF security.

- Strong growth path into senior security engineering, purple team, or threat-hunting roles.

• Vulnerability Management
• Qualys
• Threat Intelligence
• CloudSEK
• Mandiant
• SIEM
• SOC Operations
• Threat Hunting
• MITRE ATT&CK
• Python Scripting
• PowerShell Automation
• SOAR
• WAF Security
• Cloud Security (AWS/Azure/GCP)
• OWASP Top 10 / CVE Management