Cyber Threat Exposure - Principal Analyst

Diversity Nexus; Gurugram District; Hybrid; INR 4,000,000 - 6,500,000; Full time

Job summary

Diversity Nexus in Gurgaon, India (Hybrid - 3 days in office) seeks a Threat Exposure Principal Analyst to lead the Cyber Threat Exposure Management program. You will drive strategy, execution, and continuous improvement while coordinating with OT, app, threat intel, and security teams to prioritize and remediate exposure risks.

We require 14+ years in cybersecurity, strong leadership, and hands-on expertise in vulnerability management, penetration testing, and attack surface management.

Qualifications

• Bachelor's degree in CS, Info Security or related field.
• 14+ years in cybersecurity with focus on exposure and vulnerability management.
• Strong leadership, stakeholder management, and communication to executives.
• Hands-on security testing, breach/attack simulations, and risk-based prioritization.
• Experience in large complex enterprises; manufacturing background preferred.
• Ability to integrate data across multiple security domains into a remediation pipeline.

Responsibilities

• Lead strategy and execution of the Cyber Threat Exposure Management program.
• Oversee day-to-day operations and continuous improvement of the program.
• Integrate exposure data across VM, OT security, app security, threat intel, and more.
• Own the technical roadmap for VM, ASM, exposure validation, and offensive security.
• Brief senior leadership on cybersecurity posture and risk reduction.

Skills

Threat Exposure

Vulnerability Mgmt

Penetration Testing

Offensive Security

Attack Surface Mgmt

Executive Communication

People Leadership

Stakeholder Mgmt

Education

Bachelor's degree in CS/Info Security

Certifications: CISSP OSCP OSCE OSEP GPEN GXPN

Job description

• We are looking to hire a Threat Exposure Principal Analyst to join our Cybersecurity Threat Management team.
• Reporting to the Director of Cyber Threat Management, this role will be responsible for leading the strategy, execution, and continuous improvement of the Cyber Threat Exposure Management program.

Location: Gurgaon, India (Hybrid - 3 days in Office)

Experience: 14+ years in Cybersecurity, with a strong focus on Threat Exposure and Vulnerability Management.

Role Requirements

• Senior Manager-level professional with strong technical expertise in Threat Exposure Management and Cybersecurity.
• Strong experience in Cybersecurity, Vulnerability Management, Penetration Testing, Offensive Security, and Attack Surface Management.
• Proven experience in people management, stakeholder relationship building, and leading and collaborating with smaller teams.
• Experience working in large, complex enterprise organizations is required, preferably within the manufacturing industry.
• Must be highly autonomous, capable of operating with minimal supervision while leading both strategic initiatives and operational execution.
• Seeking a senior executive who combines strong technical expertise with individual contribution, people management, and effective team leadership.
• Experience managing and mitigating vulnerability risks in manufacturing environments where continuous system availability and business continuity are critical.
• Integrate exposure data across Vulnerability Management, OT Security, Application Security, Threat Intelligence, Threat Hunting, and other relevant teams into a unified, prioritized remediation pipeline.
• Lead the technical roadmap and day-to-day execution of Vulnerability Management, Attack Surface Management, Exposure Validation, and Offensive Security capabilities.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent knowledge gained through industry, military, or government experience.
• Relevant security certifications such as CISSP, OSCP, OSCE, OSEP, GPEN, GXPN, or equivalent professional certifications.
• 14+ years of progressive cybersecurity experience, with deep specialization in Offensive Security, Penetration Testing, Vulnerability Management, or Attack Surface Management.
• Hands-on experience with penetration testing, breach and attack simulation, or security testing.
• Proven track record of developing risk-based prioritization frameworks that translate technical findings into business risk and drive measurable remediation outcomes.
• Executive-level communication skills, including the ability to brief senior leadership on cybersecurity posture and risk reduction.
• Prior experience leading and managing large teams.