Vulnerability Analyst

Job Title: Vulnerability Management

Location: Pune

Exp: 5+ Years

Responsible for leading the VM program from a technical standpoint within our multi-cloud

and containerized environment. This role requires deep knowledge of Common

Vulnerabilities and Exposures (CVE), misconfigurations, and common ways to exploit

vulnerabilities in cloud and third-party software. The ideal candidate will have the technical

expertise to resolve root causes of vulnerabilities and the ability to collaborate optimally

with development teams to remediate exposures.

Key Responsibilities:

• Vulnerability Identification and Assessment: Use various tools to continuously scan,

identify, and assess vulnerabilities

• Container Security: Ensure the security of container images, base images, lambdas, and

other entry points for vulnerabilities.

• Root Cause Analysis (RCA): Conduct detailed RCA to resolve underlying issues of

identified vulnerabilities and security misconfigurations.

• Remediation Planning: Develop and implement remediation plans to address identified

vulnerabilities, working closely with development and operations teams to ensure timely

resolution.

• Security Best Practices: Promote and implement security practices and standards across

all cloud and environments that are containerized.

• Documentation and Reporting: Maintain detailed documentation of vulnerability findings,

remediation efforts, and overall vulnerability management processes. Provide regular

reports to senior management on the state of vulnerabilities and remediation progress.

• Collaborate with cross-functional teams, including developers, operations, and IT, to

address security concerns.

• Continuous Improvement: Continuously improve the VM program by integrating new

tools, technologies, gaps in our environment and methodologies to improve security

posture.

Qualifications:

• Education: Bachelor's degree in Information Security, Computer Science, or a related

field.

• Experience: Minimum of 5 years of experience in vulnerability management,

cybersecurity, with a focus on containerized environments

• Extensive knowledge of CVEs, understanding our vulnerabilities are exploited, and

vulnerability assessment tools.

• Experience with cloud platforms including GCP, Azure, and AWS.
• Proficiency in RCA and remediation planning.
• Vulnerability Management compliance and NIST standards