Role Description
Vulnerability Management Analyst
Experience: Minimum 5 years of relevant experience
Job Summary
We are seeking a highly experienced and knowledgeable Senior Security analyst to join our Vulnerability Management team. The ideal candidate will have extensive experience in cybersecurity, with a deep understanding of vulnerability management processes, tools, and best practices. This role requires strong analytical skills, excellent communication abilities, and a proactive approach to identifying and mitigating security risks.
Key Responsibilities
Worked in a Vulnerability Management Team and also play the role of SME in Vulnerability management.
Build the methodologies for Vulnerability Management service using new technologies and AI Lead the vulnerability management program, ensuring comprehensive identification, assessment, and remediation of vulnerabilities.
Develop and implement strategies to enhance the organization's security posture.
Conduct in-depth vulnerability assessments to identify security weaknesses.
Develop and improvise methods to detect and analyze vulnerabilities and create reports and dashboards for the customer using Vulnerability management tools like Qualys VMDR, MS Defender, Wiz and CrowdStrike Interpret scan results and provide detailed reports with actionable recommendations.
Prioritize vulnerabilities based on potential impact and likelihood of exploitation.
Collaborate with technical teams to develop and implement effective remediation plans.
Stay updated with the latest cybersecurity threats, trends, and technologies.
Develop and deliver training sessions on vulnerability management best practices.
Participate in incident response activities, providing expertise in vulnerability exploitation and mitigation.
Ensure compliance with industry standards and regulatory requirements.
Qualifications
Bachelor’s degree in computer science, Information Security, or related field.
Minimum of 5 years of experience in cybersecurity, with a focus on vulnerability management.
In-depth knowledge of cybersecurity principles, threats, and attack vectors.
Knowledge of network protocols, architecture, and topologies.
Extensive experience with various operating systems (Windows, Linux, macOS) and their security configurations.
Advanced skills in using and configuring vulnerability scanning tools, Qualys VMDR, MS Defender, or CrowdStrike.
Experience with Rapid7, Tenable, or cloud security is a plus.
Strong analytical and critical thinking abilities to identify root causes and solutions for vulnerabilities.
Excellent verbal and written communication skills to effectively communicate with stakeholders.
Experience in risk assessment methodologies and patch management best practices.
Automation skills and experience with scripting languages (e.g., Python, PowerShell) are a plus.
Relevant certifications (e.g., CISSP, CEH, OSCP) are highly desirable.
