Information & Cybersec Lead

HCLTech; Greater Noida; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

HCL Technologies Limited is hiring for an Information & Cybersec Lead to oversee vulnerability management and security configuration programs. The role requires coordinating across IT and security teams to manage vulnerabilities, remediation tracking, and evidence for audits.

You will lead scanning strategies, report generation, and stakeholder communication. The ideal candidate brings 3–6 years in information security, hands-on VA/SCA tooling experience, and knowledge of CIS/NIST/ISO/PCI

Qualifications

• 3 to 6 years of relevant experience in Information Security, Vulnerability Management, IT Security Operations, or Infrastructure Security.
• Hands-on experience with Vulnerability Assessment tools such as Qualys, Tenable, Rapid7 Nexpose.
• Experience in analyzing vulnerability scan results, compliance scan results, remediation evidence, and exception requests.
• Good understanding of vulnerability lifecycle management, including identification, prioritization, assignment, remediation tracking, validation, and closure.
• Knowledge of infrastructure technologies including Windows, Linux, network devices, databases, virtualization, storage, and security devices.
• Awareness of cybersecurity frameworks and benchmarks such as CIS Benchmarks, NIST, OWASP, and OSSTMM.
• Working knowledge of standards and regulatory requirements such as ISO 27001, PCI DSS, SOC 1/2, and HIPAA.
• Good understanding of CVEs, CVSS, threat advisories, vendor patches, exploitability, and risk-based vulnerability prioritization.
• Experience in preparing reports, dashboards, trackers, and management updates related to vulnerabilities and compliance findings.
• Strong written and verbal communication skills with the ability to coordinate with technical and non-technical stakeholders.

Responsibilities

• Perform vulnerability assessment and security configuration assessment across servers, networks, databases, and infrastructure components.
• Execute scheduled and ad-hoc scans using VA/SCA tools ensuring coverage and scan health.
• Analyze results to identify true positives, false positives, and remediation requirements.
• Coordinate with GIT, GIS, application and infrastructure teams for remediation tracking and closure.
• Prepare and publish reports for governance and management review.
• Track remediation progress and ensure timely closure per SLA.
• Support validation of remediated vulnerabilities via rescans/evidence review.
• Maintain records of findings, risk acceptance, false positives, and remediation evidence.
• Support audit requirements with vulnerability management artifacts.
• Monitor threat advisories and critical vulnerabilities relevant to the tech environment.
• Escalate risks or remediation challenges to seniors as needed.
• Contribute to continuous improvement of vulnerability and security configuration programs.
• Maintain professional communication with stakeholders and adopt a solution-focused approach.

Skills

Vulnerability management

Information security

Threat intelligence

Stakeholder coordination

Reports & dashboards

Education

Bachelor's degree in CS/IS/Engineering

Tools

Qualys

Tenable

Rapid7 Nexpose

Job description

Career Opportunities: Information & Cybersec Lead (187674)

Requisition ID187674-Posted11/10/2026

The Vulnerability Analyst is expected to perform the following activities:

• Perform vulnerability assessment and security configuration assessment activities across servers, network devices, databases, security devices, operating systems, and other infrastructure components.
• Execute scheduled and ad-hoc scans using VA/SCA tools and ensure scan coverage, scan health, authentication status, and scan quality.
• Analyze vulnerability assessment results to identify true positives, false positives, exceptions, and remediation requirements.
• Coordinate with GIT, GIS, application, infrastructure, and other internal teams for remediation tracking and closure of identified vulnerabilities gaps.
• Prepare and publish vulnerability, remediation, SLA, and exception reports for internal governance and management review.
• Track remediation progress and follow up with respective teams to ensure timely closure as per defined SLA.
• Support validation of remediated vulnerabilities through rescans or evidence review.
• Maintain accurate records of findings, exceptions, risk acceptance, false positives, and remediation evidence.
• Support internal and external audit requirements by providing required vulnerability management and compliance artifacts.
• Monitor threat advisories, critical vulnerabilities, and threat intelligence updates relevant to the organization’s technology environment.
• Escalate risks, delays, scan failures, authentication issues, or remediation challenges to senior team members or management as required.
• Contribute to continuous improvement of the Vulnerability Management and Security Configuration Management program from a process and technology standpoint.
• Maintain professional communication with stakeholders and support a solution-focused approach in issue resolution.

Key Responsibilities

The Vulnerability Analyst is expected to perform the following activities:

• Perform vulnerability assessment and security configuration assessment activities across servers, network devices, databases, security devices, operating systems, and other infrastructure components.
• Execute scheduled and ad-hoc scans using VA/SCA tools and ensure scan coverage, scan health, authentication status, and scan quality.
• Analyze vulnerability assessment results to identify true positives, false positives, exceptions, and remediation requirements.
• Coordinate with GIT, GIS, application, infrastructure, and other internal teams for remediation tracking and closure of identified vulnerabilities gaps.
• Prepare and publish vulnerability, remediation, SLA, and exception reports for internal governance and management review.
• Track remediation progress and follow up with respective teams to ensure timely closure as per defined SLA.
• Support validation of remediated vulnerabilities through rescans or evidence review.
• Maintain accurate records of findings, exceptions, risk acceptance, false positives, and remediation evidence.
• Support internal and external audit requirements by providing required vulnerability management and compliance artifacts.
• Monitor threat advisories, critical vulnerabilities, and threat intelligence updates relevant to the organization’s technology environment.
• Escalate risks, delays, scan failures, authentication issues, or remediation challenges to senior team members or management as required.
• Contribute to continuous improvement of the Vulnerability Management and Security Configuration Management program from a process and technology standpoint.
• Maintain professional communication with stakeholders and support a solution-focused approach in issue resolution.

Skill Requirements

• 3 to 6 years of relevant experience in Information Security, Vulnerability Management, IT Security Operations, or Infrastructure Security.
• Hands-on experience with Vulnerability Assessment tools such as Qualys, Tenable, Rapid7 Nexpose.
• Experience in analyzing vulnerability scan results, compliance scan results, remediation evidence, and exception requests.
• Good understanding of vulnerability lifecycle management, including identification, prioritization, assignment, remediation tracking, validation, and closure.
• Knowledge of infrastructure technologies including Windows, Linux, network devices, databases, virtualization, storage, and security devices.
• Awareness of cybersecurity frameworks and benchmarks such as CIS Benchmarks, NIST, OWASP, and OSSTMM.
• Working knowledge of standards and regulatory requirements such as ISO 27001, PCI DSS, SOC 1/2, and HIPAA.
• Good understanding of CVEs, CVSS, threat advisories, vendor patches, exploitability, and risk-based vulnerability prioritization.
• Experience in preparing reports, dashboards, trackers, and management updates related to vulnerabilities and compliance findings.
• Strong written and verbal communication skills with the ability to coordinate with technical and non-technical stakeholders.

Educational Qualification

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or a related discipline.