Architect - India

Persistent Systems; Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Persistent Systems is seeking a Vulnerability Management Analyst to identify, assess, and drive remediation of security vulnerabilities across on-prem, cloud, and endpoint environments. You will focus on risk-based vulnerability management and collaborate with IT, Cloud, Infrastructure, App, and DevOps teams to improve security posture.

The role involves scanning, validating results, enriching findings with CVSS and asset criticality, and tracking remediation through closure.

Qualifications

• Experience in identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across on-prem, cloud, and endpoints.
• Ability to enrich findings using CVSS, asset criticality, data sensitivity, and external exposure.
• Track vulnerabilities through lifecycle from detection to closure and prioritize based on business risk.

Responsibilities

• Perform regular vulnerability scans across infrastructure, cloud, endpoints, applications, and network devices.
• Validate scan results to eliminate false positives.
• Prioritize vulnerabilities based on business risk, not just severity.
• Create dashboards and reports for vulnerability trends and risk reduction metrics.
• Drive automation using SOAR, scripting, or APIs.
• Support patching, configuration hardening, and compensating controls.
• Explain risk to technical and non-technical stakeholders.

Skills

Vulnerability management

Risk assessment

Cloud security

Windows/Linux security

Scripting/automation

Education

Bachelor's or Master's in Computer Science/Engineering

Tools

Tenable

Qualys

Rapid7

Microsoft Defender

VMWiz

Prisma Cloud

Azure Defender

Job description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

About Position

The Vulnerability Management Analyst is responsible for identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across on-prem, cloud, and endpoint environments. The role focuses on risk-based vulnerability management, collaboration with IT/application teams, and continuous security posture improvement.

• Perform regular vulnerability scans across infrastructure, cloud, endpoints, applications, and network devices.
• Validate scan results to eliminate false positives.
• Enrich findings using CVSS, exploit availability, CISA KEV, asset criticality, and internet exposure.
• Track vulnerabilities throughout their lifecycle from detection to closure.
• Prioritize vulnerabilities based on business risk, not just severity.
• Integrate context such as asset criticality, data sensitivity, exploit maturity, and external exposure.
• Work closely with IT, Cloud, Infrastructure, App, and DevOps teams.
• Assign remediation actions and track SLAs.
• Support patching, configuration hardening, and compensating controls.
• Validate fixes and perform rescans.
• Create dashboards and reports for vulnerability trends, SLA adherence, and risk reduction metrics.
• Maintain vulnerability standards, procedures, and playbooks.
• Drive automation using SOAR, scripting, or APIs.
• Strong understanding of vulnerability management frameworks.
• Hands-on experience with tools such as Tenable, Qualys, Rapid7, Microsoft Defender, VMWiz, Prisma Cloud, Azure Defender.
• Solid knowledge of Windows, Linux, Network, Cloud (Azure/AWS/GCP).
• Understanding of patch management and system hardening.
• Strong risk analysis and problem-solving capability.
• Ability to explain risk to technical and non-technical stakeholders.
• Excellent documentation and reporting skills.

Preferred: Bachelor's or Master's degree in Computer Science, Engineering, or a related field.