Analyst Vulnerability Management

Alstom Transportation; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Flexible working environment

Competitive social coverage

Award-winning learning

Job summary

Alstom is seeking an Analyst Vulnerability Management in Bengaluru to safeguard digital assets by identifying, assessing, and mitigating security risks. You will collaborate with infrastructure, owners, and partners, analyze threat intel, and design actionable dashboards.

Role focuses on vulnerability assessments, pen testing, and implementing Secure SDLC programs, with a strong emphasis on remediation within SLAs and cross-functional coordination.

Qualifications

• Bachelor/Master in Engineering/Technology or related field.
• 6–8 years of relevant IT experience.
• Certifications such as CISSP, CEH, GPEN, or OSCP are desirable.
• Experience with threat modeling, system hardening, and Secure SDLC.

Responsibilities

• Identify, assess, and mitigate security risks and vulnerabilities.
• Coordinate penetration testing activities and remediation efforts.
• Analyze vendor assessment reports and meet SLAs.
• Eliminate false positives and provide remediation guidance.
• Design and deliver security dashboards and metrics.
• Promote Secure SDLC practices across the organization.

Skills

Threat modeling

Vulnerability assessment

Penetration testing

Secure SDLC

Security dashboards

Security awareness

Analytical skills

Scripting for detection

Cross-functional collaboration

Education

Bachelor’s/Master’s in Engineering/Technology

Tools

Qualys

Veracode

Nessus

AppScan

Job description

Location: Bangalore, KA, IN

Company: Alstom

Could you be the full-time Analyst Vulnerability Management in Bangalore were looking for

Your future role

Take on a new challenge and apply your cybersecurity expertise in a cutting-edge field. You'll work alongside collaborative and innovative teammates.

Youll play a crucial role in safeguarding Alstoms digital assets by identifying, assessing, and mitigating security risks. Day-to-day, youll work closely with teams across the business (infrastructure, application owners, and external partners), analyze threat intelligence reports, and design actionable security dashboards, among other responsibilities.

You'll specifically take care of vulnerability assessments and penetration testing, but also implement Secure SDLC (Software Development Life Cycle) programs.

Well look to you for:

• Monitoring new and emerging threats and vulnerabilities, verifying their applicability, and initiating remediation activities.
• Scheduling and managing penetration testing activities, analyzing results, and engaging stakeholders for remediation.
• Analyzing assessment reports from vendors and resolving issues within defined SLAs.
• Removing false positives in assessment reports and providing guidance on remediation plans.
• Designing and delivering actionable information security dashboards and metrics programs.
• Creating awareness across the organization about good security practices and the benefits of Secure SDLC programs.

All about you

We value passion and attitude over experience. That's why we don't expect you to have every single skill. Instead, we've listed some that we think will help you succeed and grow in this role:

• Bachelors/Masters degree in Engineering/Technology or a related field.
• 6-8 years of relevant IT experience.
• Professional certifications such as CISSP, CEH, GPEN, or OSCP.
• Experience or understanding of threat modeling, systems hardening, and Secure SDLC programs.
• Knowledge of penetration testing methodologies (e.g., OWASP, OSSTMM, PCIDSS) and tools like Qualys, Veracode, Nessus, and AppScan.
• Familiarity with TCP/IP stack, OSI layers, middleware, and mobile technologies.
• Strong analytical skills with demonstrated problem-solving ability.
• Ability to develop custom scripts for vulnerability detection and response.
• Experience in creating processes within a complex multivendor ecosystem.
• Proven planning, prioritization, and organizational skills.
• Professional and concise communication (written and verbal).

Things youll enjoy

Join us on a life-long transformative journey the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You'll also:

• Enjoy stability, challenges, and a long-term career free from boring daily routines.
• Work with new security standards for rail signalling.
• Collaborate with transverse teams and helpful colleagues.
• Contribute to innovative projects.
• Utilise our flexible and inclusive working environment.
• Steer your career in whatever direction you choose across functions and countries.
• Benefit from our investment in your development, through award-winning learning.
• Progress towards leadership roles or specialized cybersecurity expertise.
• Benefit from a fair and dynamic reward package that recognizes your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension).

You don't need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you'll be proud. If you're up for the challenge, we'd love to hear from you!