Cyber Security Analyst

SHI Solutions India Pvt. Ltd.; Hyderabad; Remote; INR 550,000 - 950,000; Full time

Job summary

SHI India Pvt. Ltd. is seeking an L1+ Vulnerability Management Support Analyst to bolster the Threat and Vulnerability Management program.

The role involves identifying, analyzing, tracking, and remediating security vulnerabilities across various assets and environments. The Associate will work with Sr. Manager – InfoSec, perform vulnerability assessments, coordinate remediation, and contribute to reporting and compliance efforts.

Qualifications

• Understanding of vulnerability management concepts, risk assessment, and remediation processes.
• Familiarity with CVSS scoring, CVEs, vulnerability prioritization, and threat intelligence.
• Ability to analyze vulnerability scan results and identify remediation recommendations.
• Experience with Windows Server, Linux, cloud platforms, and enterprise infrastructure technologies.

Responsibilities

• Perform vulnerability assessments using enterprise vulnerability management platforms.
• Review and analyze vulnerability scan results to identify security risks affecting servers, endpoints, network devices, cloud resources, applications, and databases.
• Assist in validating vulnerabilities and determining applicability, severity, and business impact.
• Research published CVEs, vendor advisories, and emerging threats to determine potential organizational impact.
• Support identification of assets affected by newly disclosed critical and high-risk vulnerabilities.
• Create, assign, and track remediation tickets to asset owners and support teams.
• Monitor remediation progress and follow up with stakeholders to support SLA compliance.
• Track program performance indicators and identify opportunities for remediation process improvement.
• Help maintain vulnerability management procedures, standards, documentation, and operating processes.
• Assist in improving vulnerability management workflows, automation opportunities, and reporting capabilities.
• Participate in recurring vulnerability review meetings with stakeholders.
• Stay informed on emerging threats, vulnerability trends, and industry best practices.

Skills

Vulnerability management

CVSS & CVE analysis

Remediation tracking

Stakeholder communication

Windows/Linux knowledge

Cloud platforms

Education

Bachelors in Cybersecurity

Tools

PowerShell

Python

REST APIs

Job description

SHI India Pvt. Ltd. is hiring for L1+ Support Analysts - Vulnerability Management. If you have experience in cybersecurity and are looking for your next career opportunity, we’d love to meet you!

Shift

24/7 rotational shifts aligned with US business hours

Communication

Good to excellent verbal communication skills are mandatory

Interview

In-person technical round is mandatory

Notice Period

Immediate joiners to a maximum of 10 days

• Time: 10:00 AM - 5:00 PM
• Venue: 8th Floor, Krishe Sapphire, Madhapur, Hyderabad - 500081

Job Description Summary:

The Associate Vulnerability Management Analyst supports the organization’s Threat and Vulnerability Management (TVM) program by assisting with the identification, analysis, tracking, and remediation of security vulnerabilities across enterprise assets. This role supports vulnerability assessments, remediation coordination, reporting, compliance activities, and threat intelligence monitoring to help reduce organizational cyber risk.

This position reports to the Sr. Manager – InfoSec and may be performed remotely with a home office setup.

Role Description:

• Perform vulnerability assessments using enterprise vulnerability management platforms.
• Review and analyze vulnerability scan results to identify security risks affecting servers, endpoints, network devices, cloud resources, applications, and databases.
• Assist in validating vulnerabilities and determining applicability, severity, and business impact.
• Research published CVEs, vendor advisories, and emerging threats to determine potential organizational impact.
• Support identification of assets affected by newly disclosed critical and high-risk vulnerabilities.
• Create, assign, and track remediation tickets to asset owners and support teams.
• Monitor remediation progress and follow up with stakeholders to support SLA compliance.
• Track program performance indicators and identify opportunities for remediation process improvement.
• Help maintain vulnerability management procedures, standards, documentation, and operating processes.
• Assist in improving vulnerability management workflows, automation opportunities, and reporting capabilities.
• Participate in recurring vulnerability review meetings with stakeholders.
• Stay informed on emerging threats, vulnerability trends, and industry best practices.

Behaviors and Competencies:

• Problem Solving: Identifies vulnerabilities, remediation blockers, and process gaps while recommending practical solutions.
• Analytical Thinking: Evaluates technical data, vulnerability trends, threat intelligence, and remediation metrics to support risk-based decision-making.
• Communication: Communicates vulnerability findings, remediation requirements, and risk information clearly to both technical and non-technical audiences.
• Collaboration: Works effectively with cross-functional teams to drive vulnerability remediation and compliance efforts.
• Initiative: Proactively identifies opportunities to improve vulnerability management processes, reporting, and operational efficiency.
• Attention to Detail: Ensures vulnerability data, remediation status, asset information, and compliance documentation are accurate and complete.
• Organization: Manages multiple remediation initiatives simultaneously while maintaining established priorities and deadlines.
• Accountability: Takes ownership of assigned vulnerabilities and remediation tracking through resolution.
• Continuous Learning: Maintains awareness of emerging threats, CVEs, technologies, and cybersecurity best practices.
• Follow-Up: Consistently tracks remediation activities and escalates unresolved vulnerabilities when appropriate.

Skill Level Requirements:

• Understanding of vulnerability management concepts, risk assessment methodologies, and remediation processes.
• Familiarity with CVSS scoring, CVEs, vulnerability prioritization, and threat intelligence.
• Ability to analyze vulnerability scan results and identify remediation recommendations.
• Experience with Windows Server, Linux, cloud platforms, and enterprise infrastructure technologies.
• Ability to create clear technical documentation and remediation guidance.
• Ability to communicate technical findings to various stakeholder groups.
• Experience using reporting and data analysis tools.
• Familiarity with compliance standards, including PCI DSS, CIS Controls, and security best practices.

External Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Information Security, or a related field.
• Foundational knowledge of vulnerability management, threat management, cybersecurity principles, and risk management practices.
• Relevant certifications such as CompTIA Security+, CompTIA CySA+, GIAC foundational certifications, or equivalent are a plus.

Internal Qualifications:

• Strong analytical and troubleshooting abilities.
• Ability to manage multiple priorities in a fast-paced environment.
• Strong verbal and written communication skills.
• A team player with the ability to collaborate effectively with cross-functional teams.
• Strong organizational and time management skills.
• Excellent attention to detail with a focus on data accuracy and reporting quality.

Other Requirements:

• Experience with vulnerability management platforms.
• Familiarity with vulnerability scanning methodologies and remediation workflows.
• Understanding of operating systems, including Windows and Linux.
• Basic understanding of networking concepts, cloud environments, and security architecture.
• Ability to interpret vendor security advisories, vulnerability bulletins, and remediation guidance.
• Experience creating reports, dashboards, and performance metrics.
• Ability to participate in incident response or critical vulnerability response activities when required.

Preferred:

• Hands-on experience with a vulnerability management platform.
• Experience using data analysis tools for vulnerability reporting and trend analysis.
• Familiarity with automation and scripting tools such as PowerShell, Python, or REST APIs.
• Experience supporting PCI DSS vulnerability management requirements.
• Knowledge of Microsoft security updates, Linux patching, and third-party application remediation.
• Understanding of risk-based vulnerability prioritization methodologies.
• Experience with vulnerability validation, remediation verification, and exception management processes.
• Exposure to cloud security concepts within Azure and AWS environments.
• Knowledge of CIS Benchmarks, NIST Cybersecurity Framework, and industry security best practices.