Cyber Security Analyst-VM

Wipro Technologies; Norwich; On-site; GBP 55,000 - 85,000; Full time

Job summary

Wipro Limited in the United Kingdom is seeking a hands-on Vulnerability Management Analyst to lead BAU vulnerability operations using Qualys VM/VMDR across servers, networks, endpoints and cloud workloads. The role emphasizes day-to-day scanning, validation, remediation tracking and stakeholder coordination.

You will own remediation tickets in ServiceNow/Jira, perform re-scans to close tickets, produce weekly and monthly reports, and support audit requirements (ISO 27001, CIS).

Qualifications

• Hands-on vulnerability management experience with Qualys VM/VMDR.
• Ability to prioritize risks using CVSS and threat context.
• Experience coordinating remediation with infrastructure and application teams.
• Experience in BAU vulnerability operations and reporting.

Responsibilities

• Perform authenticated/unauthenticated scans across servers, networks, endpoints, and cloud workloads.
• Analyze scan results, validate true positives, and reduce false positives.
• Create and manage remediation tickets in ServiceNow/Jira and track SLAs.
• Produce weekly/monthly vulnerability reports and executive summaries.
• Support audit activities (ISO 27001, CIS benchmarks) and maintain SOPs.

Skills

Operational ownership mindset

Clear stakeholder communication

Tools

Qualys VM / VMDR

ServiceNow / Jira

Nessus / Rapid7

Excel / Power BI

Scripting (Python/PowerShell/Bash)

Job description

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.

Job Description

Role Purpose

The purpose of this role is to analyze attack patterns, develop incident response plans, ensure audit readiness, and implement disaster recovery measures, to ensure adherence to cyber security regulatory frameworks.

Areas of responsibility

Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance-Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance.

Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

Role: Vulnerability Management Analyst – Qualys VM

Role Summary

We are looking for a hands‑on Vulnerability Management professional with strong operational experience on Qualys VM / VMDR to support BAU vulnerability operations for large enterprise environments.

The role is execution‑heavy and requires day‑to‑day ownership of scanning, validation, remediation tracking, reporting, and stakeholder coordination, rather than advisory or governance‑only work.

Key Responsibilities

Qualys VM Operations

• Perform authenticated and unauthenticated vulnerability scans using Qualys VM / VMDR across:
  • Servers (Windows & Linux)
  • Network devices
  • Endpoints
  • Cloud workloads (AWS / Azure)
• Manage asset discovery, tagging, and grouping within Qualys.
• Configure and maintain scan profiles, schedules, and exclusions based on environment and risk.
• Troubleshoot scan failures, authentication issues, and agent‑related problems.

Vulnerability Analysis & Validation

• Analyze Qualys scan results and:
  • Validate true positives
  • Identify and eliminate false positives
• Apply risk‑based prioritization using CVSS, exploitability, asset criticality, and threat context.
• Track zero‑day and high‑severity vulnerabilities and support expedited remediation.

Remediation & Stakeholder Coordination

• Create, track, and manage remediation tickets using:
  • ServiceNow / Jira or equivalent ITSM tools
• Work closely with:
  • Infrastructure teams
  • Application owners
  • Cloud and platform teams
• Follow up on remediation SLAs and perform re‑scans to confirm closure.

Reporting & BAU Governance

• Prepare and publish:
  • Weekly / Monthly vulnerability reports
  • Executive summaries and dashboards
• Support compliance and audit requirements (ISO 27001, CIS benchmarks, etc.).
• Maintain SOPs, runbooks, and BAU documentation.

Tooling & Automation (Good to Have)

• Support Qualys API integrations with ServiceNow, SIEM, or reporting tools.
• Basic scripting exposure (Python / PowerShell / Bash) for automation and data handling.

Mandatory Skills & Experience

Core Technical Skills

• Strong hands‑on experience with Qualys VM / Qualys VMDR (mandatory)
• Solid understanding of:
  • Vulnerability lifecycle (identify → assess → remediate → validate)
  • CVE, CVSS, exploitability, patching concepts
• Experience with:
  • Windows & Linux OS
  • Networking fundamentals (TCP/IP, ports, firewalls)
• Exposure to cloud vulnerability scanning (AWS / Azure) is highly desirable.

Tools & Platforms

• Qualys VM / VMDR
• ITSM tools: ServiceNow / Jira
• Supporting tools: Nessus / Rapid7 (good to have, not mandatory)
• Reporting tools: Excel / Power BI (basic to intermediate)

Soft Skills (Important for BAU Success)

• Strong operational ownership mindset
• Ability to manage multiple remediation streams in parallel
• Clear communication with technical and non‑technical stakeholders
• Comfortable handling escalations and SLA‑driven delivery
• Good documentation and reporting discipline

Preferred / Nice to Have

• Experience in managed security services
• Exposure to:
  • Policy compliance scanning
  • Cloud posture / infrastructure security
• Certifications (preferred, not mandatory):
  • Qualys certification
  • CEH / Security+ / ISO 27001 awareness

Role Type

• Hands‑on BAU / Run Operations
• Not a consulting‑only or GRC‑only role
• Ideal for candidates who enjoy day‑to‑day vulnerability operations and execution

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Wipro is committed to creating an accessible, supportive, and inclusive workplace. Reasonable accommodation will be provided to all applicants including persons with disabilities, throughout the recruitment and selection process. Accommodations must be communicated in advance of the application, where possible, and will be reviewed on an individual basis. Wipro provides equal opportunities to all and values diversity.