Continuous Threat Exposure Management (CTEM)

Tata Consultancy Services; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Tata Consultancy Services in Bengaluru is seeking a skilled cybersecurity professional to manage vulnerabilities and exposure data across platforms. You will prioritize findings using threat context, correlate with threat intel, and translate results into actionable remediation with cross-functional teams.

The role focuses on risk-based decision making, executive reporting, and improving controls across infrastructure, cloud, and applications.

Qualifications

• Five or more years of experience in cybersecurity, vulnerability management, exposure management, security operations, threat intelligence, or a related discipline.
• Strong knowledge of vulnerability management practices, remediation workflows, vulnerability scoring, exploitability analysis, and risk-based prioritization.
• Ability to assess technical findings using threat context, asset importance, business impact, and the likelihood of exploitation.
• Working knowledge of CVE, CVSS, CISA KEV, exploit availability, attack paths, misconfigurations, and external exposure.
• Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, or manufacturing technology teams.
• Experience developing security metrics, dashboards, management reporting, and concise risk communications for technical and leadership audiences.
• Strong analytical, problem-solving, organizational, and stakeholder-management skills.
• Excellent written and verbal communication skills, with the ability to translate complex technical risk into clear business language.

Responsibilities

• Analyze and prioritize vulnerabilities, security findings, and exposure data from multiple platforms and teams.
• Apply threat-informed prioritization using exploitation, threat activity, asset criticality, and business impact.
• Correlate data with threat intelligence and adversary behavior to refine risk posture.
• Translate findings into remediation recommendations and coordinate with owners to drive resolution.
• Track remediation and validate corrective actions; identify overdue items and escalate risk when needed.
• Review findings from scanners, external platforms, audits, and other security programs.
• Support rapid prioritization and coordinated response for critical vulnerabilities and zero-day threats.
• Develop operational and executive reporting on exposure trends, remediation performance, and risk reduction.
• Produce metrics, dashboards, scorecards, and recurring analyses to enable risk-based decisions.
• Collaborate with Security Operations, Threat Intelligence, Infrastructure, Cloud, Engineering, and business teams to reduce exposure.
• Identify recurring weaknesses and opportunities to improve controls, data quality, and remediation efficiency.
• Occasionally investigate exposure data for findings of interest and support compensating-control reviews.

Skills

Cybersecurity

Vulnerability management

Exposure management

Threat intelligence

Risk-based prioritization

Security metrics

Dashboard reporting

Stakeholder management

Communication skills

Python

APIs

Power BI

SQL

Databricks

Automation

Tools

CrowdStrike Exposure Management

Falcon Spotlight

Rapid7

ServiceNow Vulnerability Response

Cortex Xpanse

Power BI

Python

SQL

Databricks

Job description

Key Responsibilities

• Analyze and prioritize vulnerabilities, security findings, and exposure data received from multiple security platforms, assessment activities, and security teams.
• Apply threat-informed prioritization using active exploitation, known threat activity, exploit availability, asset criticality, business impact, and compensating controls.
• Correlate vulnerability and exposure data with threat intelligence, including Known Exploited Vulnerabilities, emerging campaigns, ransomware activity, and relevant adversary behavior.
• Translate security findings into clear, actionable remediation recommendations and coordinate with asset, application, infrastructure, cloud, and service owners to drive resolution.
• Track remediation progress through closure, validate corrective actions, identify overdue or stalled items, and escape material risk when required.
• Review findings reported by vulnerability scanners, external attack surface platforms, penetration tests, cloud security tools, audits, assessments, and other security programs.
• Support rapid prioritization and coordinated response for critical vulnerabilities, zero-day threats, and exposures associated with active or credible exploitation.
• Develop operational and executive reporting on exposure trends, remediation performance, risk reduction, service-level adherence, and program effectiveness.
• Produce metrics, dashboards, scorecards, and recurring analyses that enable risk-based decision-making and improve accountability for remediation.
• Collaborate with Security Operations, Threat Intelligence, Infrastructure, Cloud, Engineering, Manufacturing, application teams, and business stakeholders to reduce enterprise exposure.
• Identify recurring weaknesses, emerging exposure trends, and opportunities to improve controls, processes, data quality, ownership, or remediation efficiency.
• Occasionally investigate exposure data for findings of interest and support vulnerability exceptions, risk acceptance, and compensating-control reviews.

Required Qualifications

• Five or more years of experience in cybersecurity, vulnerability management, exposure management, security operations, threat intelligence, or a related discipline.
• Strong knowledge of vulnerability management practices, remediation workflows, vulnerability scoring, exploitability analysis, and risk-based prioritization.
• Demonstrated ability to assess technical findings using threat context, asset importance, business impact, and the likelihood of exploitation.
• Working knowledge of common vulnerability and exposure concepts, including CVE, CVSS, CISA KEV, exploit availability, attack paths, misconfigurations, and external exposure.
• Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, or manufacturing technology teams.
• Experience developing security metrics, dashboards, management reporting, and concise risk communications for technical and leadership audiences.
• Strong analytical, problem-solving, organizational, and stakeholder-management skills.
• Excellent written and verbal communication skills, with the ability to translate complex technical risk into clear business language.

Preferred Qualifications

• Experience with platforms such as CrowdStrike Exposure Management or Falcon Spotlight, Rapid7, ServiceNow Vulnerability Response, Cortex Xpanse, or comparable technologies.
• Experience applying cyber threat intelligence to vulnerability and exposure prioritization workflows.
• Familiarity with external attack surface management, cloud security, identity exposure, application security, or attack-path analysis.
• Experience working with large vulnerability datasets and improving data quality, asset ownership, deduplication, or system-of-record accuracy.
• Experience using Python, APIs, Power BI, SQL, Databricks, or automation platforms to streamline analysis, reporting, and workflow integration.
• Experience supporting a large, global, regulated, manufacturing, or technology-focused enterprise environment.