Cyber Security Analyst

Wipro; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Pension (contributory up to 5%)

Life insurance 4x

Private medical insurance

Job summary

Wipro is seeking a hands-on Vulnerability Management Analyst in London to own day-to-day vulnerability operations, focusing on Qualys VM/VMDR within large enterprise environments. The role is execution-heavy, involving scanning, validation, remediation tracking, reporting, and cross-team coordination with infrastructure, application, cloud and platform teams to meet remediation SLAs.

Strong experience in prioritization using CVSS, asset criticality and threat context, plus familiarity with

Qualifications

• Strong hands-on experience with Qualys VM / Qualys VMDR (mandatory).
• Solid understanding of CVE/CVSS, patching concepts.
• Experience with cloud vulnerability scanning (AWS/Azure) is desirable.
• Familiarity with ITSM tools like ServiceNow or Jira.

Responsibilities

• Perform authenticated and unauthenticated vulnerability scans using Qualys VM / VMDR across assets.
• Manage asset discovery, tagging, and grouping within Qualys.
• Configure and maintain scan profiles, schedules, and exclusions based on environment and risk.
• Troubleshoot scan failures, authentication issues, and agent-related problems.
• Analyse Qualys scan results and identify and eliminate false positives.
• Apply risk-based prioritization using CVSS, exploitability, asset criticality, and threat context.
• Track zero-day and high-severity vulnerabilities and support expedited remediation.
• Create, track, and manage remediation tickets using ServiceNow / Jira or equivalent ITSM tools.
• Work closely with infrastructure, application, cloud and platform teams; follow up on remediation SLAs and perform re-scans to confirm closure.
• Prepare and publish weekly / monthly vulnerability reports; executive summaries and dashboards; support compliance (ISO 27001, CIS).
• Maintain SOPs, runbooks, and BAU documentation.

Skills

Qualys VM/VMDR

ServiceNow/Jira

Excel/Power BI

Networking fundamentals

Cloud vulnerability scanning

Nessus

Rapid7

CVSS

ISO 27001

Tools

ServiceNow

Jira

Nessus

Rapid7

Job description

Role:Vulnerability Management Analyst – Qualys VM

Location: London hybrid role

Experience in pure hands‑on Vulnerability Management experience mandatory

Role Summary

We are looking for a hands‑on Vulnerability Management professional with strong operational experience on Qualys VM / VMDR to support BAU vulnerability operations for large enterprise environments.

The role is execution‑heavy and requires day‑to‑day ownership of scanning, validation, remediation tracking, reporting, and stakeholder coordination, rather than advisory or governance‑only work.

Key Responsibilities

Qualys VM Operations

• Perform authenticated and unauthenticated vulnerability scans using Qualys VM / VMDR across:
• Manage asset discovery, tagging, and grouping within Qualys.
• Configure and maintain scan profiles, schedules, and exclusions based on environment and risk.
• Troubleshoot scan failures, authentication issues, and agent‑related problems.

Vulnerability Analysis & Validation

• Analise Qualys scan results and:
• Identify and eliminate false positives
• Apply risk‑based prioritization using CVSS, exploitability, asset criticality, and threat context.
• Track zero‑day and high‑severity vulnerabilities and support expedited remediation.

Remediation & Stakeholder Coordination

• Create, track, and manage remediation tickets using:
• ServiceNow / Jira or equivalent ITSM tools
• Work closely with:
• Infrastructure teams
• Application owners
• Cloud and platform teams
• Follow up on remediation SLAs and perform re‑scans to confirm closure.

Reporting & BAU Governance

• Prepare and publish:
• Weekly / Monthly vulnerability reports
• Executive summaries and dashboards
• Support compliance and audit requirements (ISO 27001, CIS benchmarks, etc.).
• Maintain SOPs, runbooks, and BAU documentation.

Mandatory Skills & Experience

• Strong hands‑on experience with Qualys VM / Qualys VMDR (mandatory)
• Solid understanding of:
• CVE, CVSS, exploitability, patching concepts
• Experience with:
• Networking fundamentals (TCP/IP, ports, firewalls)
• Exposure to cloud vulnerability scanning (AWS / Azure) is highly desirable.
• Qualys VM / VMDR
• ITSM tools: ServiceNow / Jira
• Supporting tools: Nessus / Rapid7 (good to have, not mandatory)
• Reporting tools: Excel / Power BI (basic to intermediate)

Wipro is an exciting organization to work for. We ranked as a “Top Employer” as part of the Top Employer Institute annual listings. We were assessed on several key HR practices including Diversity and Inclusion.

Benefits: You will receive a competitive salary, a generous benefits package, training, and development, as well as an exciting career within a fast paced and dynamic business. Your benefits include

• Contributory pension of up to 5%
• 4x life insurance policy
• Private medical insurance (50)

Wipro is an advocate for positive change and conscious inclusion. As a global employer, we strive to create a diverse Wipro family by remaining committed to the development of our culture, diversity, equality, and inclusion in the workplace. All applicants welcome.