Automated Security Scanning Business Analyst

Purview Services; Coimbatore District; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

Purview Services seeks an experienced cybersecurity professional to lead vulnerability assessments and security engineering initiatives across cloud and on-prem environments. You will articulate risks to both technical teams and business stakeholders, drive secure software development, and mentor junior staff.

The role emphasizes strong analytical skills, integrity, and collaboration under pressure, with exposure to regulatory frameworks and best practices.

Qualifications

• 7+ years of experience in cybersecurity, information security or security engineering.
• Strong DevSecOps and software security background.
• Desirable cybersecurity certifications CISSP, CRISC, CISM, OSCP.
• Bachelor or Master degree in computer science, information technology, cybersecurity or equivalent.

Responsibilities

• Investigate security incidents and perform vulnerability assessments.
• Communicate findings to technical and business stakeholders.
• Assess and deploy security controls in cloud and on-prem environments.
• Collaborate with teams to drive secure software development practices.

Skills

Security testing

Vulnerability assessment

Exploit frameworks

Cloud vulnerability assessment

Communication to stakeholders

Agent-based scanning

Threat modelling

OWASP/NIST knowledge

Scripting/Programming

Analytical thinking

Education

CISSP

CRISC

CISM

OSCP

Bachelors or Masters in CS/IT/Cybersecurity

Tools

Nessus

Qualys

Cloud native scanning

Job description

To be successful in this role, you should meet the following requirements:

• Security testing tools, vulnerability scanning, and exploit frameworks (e.g. Tenable (Nessus), Qualys, Cloud Native Scanning capabilities or other relevant scanning tools).
• One or more Cloud platforms and cloud vulnerability assessment approaches i.e. Ali Cloud, AWS, GCP, Azure
• Vulnerability assessment and articulating these to both technical and business stakeholders.
• Agent scanning and deploying agents in a large environment.
• Malware, emerging threats, attacks, and vulnerability management.
• Industry frameworks and best practices: CIS Critical Security Controls, Threat Modelling, OWASP, NIST 800 Series.
• Operating systems, network protocols, and application development.
• Exposure to scripting or programming languages (e.g Python, C+, or PowerShell).
• Excellent critical thinking, analytical and problem-solving skills; with exceptional written and verbal communication skills.
• Strong team player and collaborative worker.
• High level of integrity and strong ethical values.
• Resilient and self driven, capable of informing and driving change and delivering high-quality outcomes, whilst often under pressure/ at pace.

Education & Experience:

• 7+ years of experience into cybersecurity, Information security or security engineering.
• Strong DevSecOps and Software security background.
• Desirable to have one or more industry-recognized cybersecurity-related certifications including CISSP, CRISC, CISM, OSCP.
• Bachelor or masters degree in computer science, Information Technology, Cybersecurity or equivalent.