Exposure Management Analyst

Medline Industries, LP; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Health insurance

Life and disability

401(k) contributions

Paid time off

Job summary

Medline Industries, LP in Pune, India is seeking a cybersecurity professional with extensive experience in vulnerability management, risk assessment, infrastructure security, security operations, and stakeholder engagement.

The role emphasizes driving measurable reductions in organizational cyber risk, governance, automation, and clear reporting to executives. You will collaborate with technical teams and leadership to reduce exposure while maintaining security posture and compliance.

Qualifications

• Bachelor's degree or higher in information security, CS, IT, or related field.
• 5+ years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
• Strong understanding of vulnerability assessment methodologies and remediation processes.
• Scripting and API integration with PowerShell, Python, JSON, or XML.

Responsibilities

• Govern the end-to-end vulnerability lifecycle from identification to closure.
• Perform vulnerability analysis using industry-standard tools.
• Prioritize risks using CVSS, exploitability, business impact, threat intel, and asset criticality.
• Track remediation activities and SLA adherence.
• Develop automated security workflows to improve efficiency.

Skills

Vulnerability management

Security operations

Cybersecurity

PowerShell

Python

JSON

XML

CVSS & CVE management

MITRE ATT&CK

Stakeholder communication

Education

Bachelor's degree in information security, Computer Science, Information Technology, or related field

Tools

SIEM

SOAR

EDR/XDR

NDR

Vulnerability management solutions

Qualys VMDR

Tenable Nessus

Rapid7 InsightVM

CrowdStrike Exposure Management

Azure

Job description

Job Summary

We are seeking a cybersecurity professional with strong experience in vulnerability management, risk assessment, infrastructure security, security operations, and stakeholder engagement. The candidate should be comfortable communicating with both technical teams and executive leadership while driving measurable reductions in organizational cyber risk.

Job Description

Key Responsibilities:

Vulnerability & Attack Surface Management:

Govern the end-to-end vulnerability lifecycle including identification, assessment, prioritization, remediation tracking, validation, and closure.

Perform vulnerability analysis using industry-standard tools.

Conduct risk-based prioritization using CVSS scores, exploitability data, business impact, threat intelligence, and asset criticality.

Track remediation activities and ensure adherence to established remediation SLAs.

Stay informed on emerging threats, vulnerabilities, and industry best practices.

Automation:

Develop and maintain automated security workflows to improve operational efficiency and reduce manual efforts.

Utilize SOAR platforms, existing tool capabilities, and integrations to streamline security operations.

Risk & Exposure Management:

Evaluate newly disclosed vulnerabilities, zero-day threats, and critical security advisories.

Assess business risk associated with vulnerabilities and provide remediation recommendations.

Drive reduction of organizational attack surface and cyber exposure.

Manage vulnerability exception and risk acceptance processes.

Support incident response investigations involving exploited vulnerabilities.

Reporting & Governance:

Develop executive-level dashboards and vulnerability metrics.

Prepare weekly and monthly reports highlighting risk posture, remediation trends, and SLA compliance.

Present vulnerability-related findings to technical leadership and business stakeholders.

Maintain vulnerability management policies, standards, procedures, and operational runbooks.

Required Qualifications:

• Bachelor’s degree in information security, Computer Science, Information Technology, or related field.
• 5+ years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
• Strong understanding of vulnerability assessment methodologies and remediation processes.
• Working knowledge of scripting and API integration technologies such as PowerShell, Python, JSON, or XML.
• Experience with security platforms and tools including SIEM, SOAR, EDR/XDR, NDR, and vulnerability management solutions.
• Experience working with any of the vulnerability management solution i.e.,
• Qualys VMDR, Tenable Nessus, Rapid7 InsightVM, CrowdStrike Exposure Management. (CrowdStrike Exposure Management is preferred)
• Experience managing vulnerabilities in: Windows Server, Linux, Active Directory, Azure
• Strong understanding of: CVSS, CVE Management, MITRE ATT&CK

Certifications:

• Security certifications such as Security+, CySA+, SC-200, GIAC, or similar are preferred but not mandatory

Our benefit package includes health insurance, life and disability, 401(k) contributions, paid time off, etc., for employees working 30 or more hours per week on average. For a more comprehensive list of our benefits. For roles where employees work less than 30 hours per week, benefits include 401(k) contributions as well as access to the Employee Assistance Program, Employee Resource Groups and the Employee Service Corp.

We’re dedicated to creating a Medline where everyone feels they belong and can grow their career. We strive to do this by seeking diversity in all forms, acting inclusively, and ensuring that people have tools and resources to perform at their best. Explore our Belonging page here.

Medline Industries, LP is an equal opportunity employer. Medline evaluates qualified individuals without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, neurodivergence, protected veteran status, marital or family status, caregiver responsibilities, genetic information, or any other characteristic protected by applicable federal, state, or local laws.