Information Security Analyst - Exposure Management

MathWorks; Hyderabad; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

MathWorks offers a hybrid work model allowing time between office and home, supporting collaboration with global teams.

The Security Operations & Engineering team protects cloud environments and infrastructure powering MathWorks' products, focusing on threat detection, incident response, and continuous hardening of security posture across international teams. The role emphasizes risk-based decision making, hands-on threat hunting, and proactive monitoring using SIEM, CSPM, and CNAPP tools.

Qualifications

• Bachelor's degree or higher with professional experience in security operations or engineering.
• Experience with security tooling and incident response.
• Certifications in cybersecurity are a plus (e.g., CompTIA Security+, GCIH, GCIA).

Responsibilities

• Conduct continuous discovery and assessment of internal and external attack surfaces to identify security exposures and potential attack paths.
• Respond to alerting from security tools, with a focus on cloud and on-prem vulnerabilities.
• Proactively monitor and create alerting rules for vulnerabilities and threats.
• Ensure alignment of physical and cloud resources with approved security baselines, policies, and guardrails.
• Perform threat hunting on IOCs associated with emerging threats.
• Stay current on emerging threats through blogs, vendor advisories, and threat intelligence feeds.
• Perform security posture monitoring through Microsoft Secure Score and similar signals across security tooling.
• Monitor and resolve gaps in internal attack surface coverage using asset management tools.
• Experience identifying, assessing, and prioritizing security exposures across internal and external environments.

Skills

Security operations

Threat detection

Incident response

Vulnerability prioritization

Risk-based decision making

Education

Bachelor's degree

Master's degree

PhD

Tools

SIEM

CSPM

CNAPP

Job description

Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in‑person time with colleagues and flexible at‑home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

Do you want to work at a company accelerating the pace of engineering and science? The Security Operations & Engineering team at MathWorks is responsible for securing the cloud environments and internal infrastructure that power our global products and platforms. We partner across engineering, IT, and international teams to detect threats, respond to incidents, and continuously harden our security posture. MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities

• Conduct continuous discovery and assessment of internal and external attack surfaces to identify security exposures and potential attack paths
• Respond to alerting from security tools, with a focus on cloud and on‑prem vulnerabilities
• Proactively monitor and create alerting rules for vulnerabilities and threats
• Ensure alignment of physical and cloud resources with approved security baselines, policies, and guardrails
• Perform threat hunting on IOCs associated with emerging threats
• Stay current on emerging threats through blogs, vendor advisories, and threat intelligence feeds
• Perform security posture monitoring through Microsoft Secure Score and similar signals across security tooling
• Monitor and resolve gaps in internal attack surface coverage using asset management tools
• Experience identifying, assessing, and prioritizing security exposures across internal and external environments

Minimum Qualifications

• A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.

Additional Qualifications

• Experience in security operations or engineering
• Experience in Exposure Management, Attack Surface Management (ASM)
• Certifications in cybersecurity are a plus (CompTIA Security+, GCIH, GCIA, or equivalent)
• Experience with SIEM, CSPM, or CNAPP platforms
• Knowledge of risk-based vulnerability management methodologies and security frameworks such as NIST CSF, CIS Controls, ISO 27001, or MITRE ATT&CK.
• Hands‑on experience with threat detection, alert triage, and incident response
• Experience with risk-based prioritization of security exposures by considering threat intelligence, exploitability, business criticality, and asset context.