System Analyst
Gemini Consulting Services · Hyderabad · onsite · Posted 1d ago
Undisclosed5–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Key Responsibilities:
- Own and manage the end-to-end vulnerability management lifecycle, from identification and validation through remediation and closure.
- Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud environments, networks, and applications.
- Analyze and validate vulnerability scan results, including identifying false positives and determining actual exposure.
- Perform risk-based vulnerability prioritization considering factors beyond CVSS/severity, including asset criticality, business impact, exploitability, exposure, and active exploitation.
- Investigate vulnerabilities across Windows and Linux environments and coordinate appropriate remediation activities.
- Assess security vulnerabilities across cloud and endpoint environments.
- Define technical remediation and mitigation steps and work with relevant teams to implement them.
- Document technical findings, evidence, risk, business impact, and recommended remediation actions.
- Drive vulnerability remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams.
- Track remediation progress and ensure vulnerabilities are addressed within defined remediation SLAs.
- Perform remediation validation through re-scanning, technical verification, or other appropriate methods.
- Support endpoint security and vulnerability management activities using relevant security platforms.
- Maintain the vulnerability dashboards, reports, remediation status, and risk documentation.
- Provide regular updates to security and business stakeholders regarding critical findings, remediation progress, exceptions, and outstanding risks.
- Support investigation and response activities for critical or actively exploited vulnerabilities, including zero-day vulnerabilities when required.
Required Qualifications:
- 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or a related security domain.
- Hands-on experience in vulnerability assessment and vulnerability management.
- Strong understanding of risk assessment and risk-based vulnerability prioritization, beyond simply relying on CVSS/severity ratings.
- Ability to analyze, investigate, and validate vulnerability scan results.
- Strong knowledge of endpoint security and vulnerability remediation.
- Good understanding of Windows and Linux operating systems from a security perspective.
- Working knowledge of networking and network security fundamentals.
- Understanding basic application security and common application vulnerabilities.
Experience working with some of the following security technologies/tools:
- Wiz
- CrowdStrike
- Nexpose / Rapid7
- Splunk
- AppSpider
- ServiceNow
Ability to document technical security findings and define appropriate remediation/mitigation steps.
Demonstrated experience driving remediation activities across multiple technical teams.
Strong communication, stakeholder management, ownership, and follow-up skills.
Preferred Qualifications:
- Experience in Security Operations (SecOps) and/or Vulnerability Management.
- Exposure in security environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
- Experience with zero-day vulnerability identification, assessment, response, and remediation.
- Experience working with remediation SLAs and vulnerability tracking.
- Familiarity with security exceptions, risk acceptance, compensating controls, and risk treatment processes.
- Experience coordinating remediation across infrastructure, cloud, network, application, and DevOps teams.
Relevant security certifications such as:
- CompTIA Security+
- CompTIA CySA+
- GIAC Security Essentials (GSEC)
Key Responsibilities:
- Own and manage the end-to-end vulnerability management lifecycle, from identification and validation through remediation and closure.
- Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud environments, networks, and applications.
- Analyze and validate vulnerability scan results, including identifying false positives and determining actual exposure.
- Perform risk-based vulnerability prioritization considering factors beyond CVSS/severity, including asset criticality, business impact, exploitability, exposure, and active exploitation.
- Investigate vulnerabilities across Windows and Linux environments and coordinate appropriate remediation activities.
- Assess security vulnerabilities across cloud and endpoint environments.
- Define technical remediation and mitigation steps and work with relevant teams to implement them.
- Document technical findings, evidence, risk, business impact, and recommended remediation actions.
- Drive vulnerability remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams.
- Track remediation progress and ensure vulnerabilities are addressed within defined remediation SLAs.
- Perform remediation validation through re-scanning, technical verification, or other appropriate methods.
- Support endpoint security and vulnerability management activities using relevant security platforms.
- Maintain the vulnerability dashboards, reports, remediation status, and risk documentation.
- Provide regular updates to security and business stakeholders regarding critical findings, remediation progress, exceptions, and outstanding risks.
- Support investigation and response activities for critical or actively exploited vulnerabilities, including zero-day vulnerabilities when required.
Required Qualifications:
- 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or a related security domain.
- Hands-on experience in vulnerability assessment and vulnerability management.
- Strong understanding of risk assessment and risk-based vulnerability prioritization, beyond simply relying on CVSS/severity ratings.
- Ability to analyze, investigate, and validate vulnerability scan results.
- Strong knowledge of endpoint security and vulnerability remediation.
- Good understanding of Windows and Linux operating systems from a security perspective.
- Working knowledge of networking and network security fundamentals.
- Understanding basic application security and common application vulnerabilities.
Experience working with some of the following security technologies/tools:
- Wiz
- CrowdStrike
- Nexpose / Rapid7
- Splunk
- AppSpider
- ServiceNow
Ability to document technical security findings and define appropriate remediation/mitigation steps.
Demonstrated experience driving remediation activities across multiple technical teams.
Strong communication, stakeholder management, ownership, and follow-up skills.
Preferred Qualifications:
- Experience in Security Operations (SecOps) and/or Vulnerability Management.
- Exposure in security environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
- Experience with zero-day vulnerability identification, assessment, response, and remediation.
- Experience working with remediation SLAs and vulnerability tracking.
- Familiarity with security exceptions, risk acceptance, compensating controls, and risk treatment processes.
- Experience coordinating remediation across infrastructure, cloud, network, application, and DevOps teams.
Relevant security certifications such as:
- CompTIA Security+
- CompTIA CySA+
- GIAC Security Essentials (GSEC)
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
VulnerabilityremediationVulnerability AssessmentRisk AssessmentComputer NetworksNetwork SecurityVulnerability ManagementApplication SecurityStakeholder ManagementLinux
About Gemini Consulting & Services
Gemini Consulting Services
IT Services & Consulting
420
employees
2010
16 years old
Hyderabad / Secunderabad, Telangana
India
₹8.5L PA avg
Avg at Gemini Consulting & Services
About
Gemini develops and implements next-generation technology to enable enterprises to accelerate and expand their digital transformation journey.
Industries
IT Services & ConsultingDesignEmerging TechnologiesSoftware Product
Employee ratings
10 reviews
3.9/ 5
Culture
4.2
Career growth
3.5
Work-life
4.4
Employees rate it well for
Work-Life Balance41Job Security40
Find them on