Exposure Management Analyst

Medline Industries India Private Limited; Pune District; On-site; INR 1,500,000 - 2,300,000; Full time

Benefits offered by this job

Health insurance

Life and disability

401(k) contributions

Paid time off

Job summary

Medline Industries India Private Limited is seeking a cybersecurity professional with strong experience in vulnerability management, risk assessment, infrastructure security, security operations, and stakeholder engagement. The role involves communicating with technical teams and executives to drive measurable reductions in organizational cyber risk.

The candidate will govern the end-to-end vulnerability lifecycle, perform risk-based prioritization, develop automated workflows, and produce

Qualifications

• Bachelor’s degree in information security, CS, IT, or related field.
• 5+ years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
• Strong understanding of vulnerability assessment methodologies and remediation processes.
• Experience with scripting and API integration technologies (PowerShell, Python, JSON, XML).
• Experience with SIEM, SOAR, EDR/XDR, NDR, and vulnerability management solutions.
• Experience with VM solutions such as Qualys VMDR, Nessus, InsightVM, CrowdStrike Exposure Management.
• Experience in Windows Server, Linux, Active Directory, Azure.
• Strong understanding of CVSS, CVE Management, MITRE ATT&CK.
• Security certifications (Security+, CySA+, SC-200, GIAC, or similar) preferred but not mandatory.

Responsibilities

• Govern end-to-end vulnerability lifecycle: identification, assessment, prioritization, remediation tracking, validation, closure.
• Perform vulnerability analysis using industry-standard tools.
• Risk-based prioritization using CVSS, exploitability, business impact, threat intel, and asset criticality.
• Track remediation activities and ensure remediation SLAs.
• Stay informed on threats, vulnerabilities and best practices.
• Develop and maintain automated security workflows to improve efficiency.
• Utilize SOAR platforms and integrations to streamline security operations.
• Evaluate newly disclosed vulnerabilities, zero-day threats, and advisories.
• Assess business risk and provide remediation recommendations.
• Drive reduction of attack surface and cyber exposure.
• Manage vulnerability exception and risk acceptance processes.
• Support incident response investigations involving exploited vulnerabilities.
• Develop executive dashboards and vulnerability metrics.
• Prepare weekly/monthly reports on risk posture and SLA compliance.
• Present vulnerability findings to technical leadership and stakeholders.
• Maintain vulnerability management policies, standards, procedures and runbooks.

Skills

Vulnerability management

Security operations

Cybersecurity

PowerShell

Python

JSON

XML

SIEM

SOAR

EDR/XDR

NDR

Vulnerability management tools

Windows Server

Linux

Active Directory

Azure

CVSS & MITRE ATT&CK

Education

Bachelor’s degree in information security, Computer Science, Information Technology, or related field

Tools

Qualys VMDR

Tenable Nessus

Rapid7 InsightVM

CrowdStrike Exposure Management

Security platforms & tools

Job description

Job Summary

We are seeking a cybersecurity professional with strong experience in vulnerability management, risk assessment, infrastructure security, security operations, and stakeholder engagement. The candidate should be comfortable communicating with both technical teams and executive leadership while driving measurable reductions in organizational cyber risk.

Job Description

Key Responsibilities:

Vulnerability & Attack Surface Management:

Govern the end-to-end vulnerability lifecycle including identification, assessment, prioritization, remediation tracking, validation, and closure.

Perform vulnerability analysis using industry-standard tools.

Conduct risk-based prioritization using CVSS scores, exploitability data, business impact, threat intelligence, and asset criticality.

Track remediation activities and ensure adherence to established remediation SLAs.

Stay informed on emerging threats, vulnerabilities, and industry best practices.

Automation:

Develop and maintain automated security workflows to improve operational efficiency and reduce manual efforts.

Utilize SOAR platforms, existing tool capabilities, and integrations to streamline security operations.

Risk & Exposure Management:

Evaluate newly disclosed vulnerabilities, zero-day threats, and critical security advisories.

Assess business risk associated with vulnerabilities and provide remediation recommendations.

Drive reduction of organizational attack surface and cyber exposure.

Manage vulnerability exception and risk acceptance processes.

Support incident response investigations involving exploited vulnerabilities.

Reporting & Governance:

Develop executive-level dashboards and vulnerability metrics.

Prepare weekly and monthly reports highlighting risk posture, remediation trends, and SLA compliance.

Present vulnerability-related findings to technical leadership and business stakeholders.

Maintain vulnerability management policies, standards, procedures, and operational runbooks.

Required Qualifications:

• Bachelor’s degree in information security, Computer Science, Information Technology, or related field.
• 5+ years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
• Strong understanding of vulnerability assessment methodologies and remediation processes.
• Working knowledge of scripting and API integration technologies such as PowerShell, Python, JSON, or XML.
• Experience with security platforms and tools including SIEM, SOAR, EDR/XDR, NDR, and vulnerability management solutions.
• Experience working with any of the vulnerability management solution i.e.,
• Qualys VMDR, Tenable Nessus, Rapid7 InsightVM, CrowdStrike Exposure Management. (CrowdStrike Exposure Management is preferred)
• Experience managing vulnerabilities in: Windows Server, Linux, Active Directory, Azure
• Strong understanding of: CVSS, CVE Management, MITRE ATT&CK

Certifications:

• Security certifications such as Security+, CySA+, SC-200, GIAC, or similar are preferred but not mandatory

Our benefit package includes health insurance, life and disability, 401(k) contributions, paid time off, etc., for employees working 30 or more hours per week on average. For a more comprehensive list of our benefits. For roles where employees work less than 30 hours per week, benefits include 401(k) contributions as well as access to the Employee Assistance Program, Employee Resource Groups and the Employee Service Corp.

We’re dedicated to creating a Medline where everyone feels they belong and can grow their career. We strive to do this by seeking diversity in all forms, acting inclusively, and ensuring that people have tools and resources to perform at their best. Explore our Belonging page.

Medline Industries, LP is an equal opportunity employer. Medline evaluates qualified individuals without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, neurodivergence, protected veteran status, marital or family status, caregiver responsibilities, genetic information, or any other characteristic protected by applicable federal, state, or local laws.