Information Security Analyst Vsquarexo

Skillmate; Chennai District; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Skillmate is seeking an Information Security Analyst to support cybersecurity operations, vulnerability management, security monitoring, risk assessment, and compliance activities. The role focuses on identifying and remediating security risks, monitoring events, and preparing security performance reports for management.

You will perform vulnerability assessments across servers, network devices, endpoints, applications and cloud environments, monitor alerts from Defender, SIEM and IDS/IPS, and

Qualifications

• 0–3 years of experience in information security or related field.
• Hands-on experience with vulnerability assessment tools like Qualys, OpenVAS/Greenbone, SIEM.
• Working knowledge of Windows and Linux server security.
• Understanding of firewalls, IDS/IPS, and network security monitoring.
• Familiarity with Azure security services and cloud security controls.
• Knowledge of information security principles, cybersecurity controls, access control, encryption, monitoring and vulnerability management.
• Certifications such as CISSP, CEH, OSCP, GIAC are a plus.

Responsibilities

• Perform vulnerability assessments across servers, network devices, endpoints, applications and cloud environments.
• Conduct internal and external vulnerability assessments using industry-standard security tools.
• Monitor and investigate security alerts from Defender, SIEM, IDS/IPS, antivirus, and other security monitoring platforms.
• Review, validate, prioritize, and coordinate remediation of security vulnerabilities and security alerts based on business risk and severity.
• Conduct security monitoring across NIDS, HIDS, antivirus, SIEM, log management, and vulnerability scanning systems.
• Research security vulnerabilities, threats, and incidents and recommend appropriate mitigation measures.
• Coordinate information security risk assessments across business and technical functions.
• Support Azure security and policy management activities.
• Develop and maintain security policies, standards, procedures, and process documentation.
• Prepare security metrics, dashboards, risk indicators, vulnerability reports, and remediation progress reports for senior management.
• Collaborate with infrastructure, network, application, cloud, and technology teams to resolve security issues.
• Support security assessments, audits, compliance activities, and regulatory requirements.
• Maintain security documentation, assessment records, remediation plans, and audit evidence.
• Monitor emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices and recommend improvements to the organization's security posture.

Skills

Vulnerability assessment

Security monitoring

Risk assessment

Compliance

Analytical thinking

Communication

Tools

Qualys

OpenVAS/Greenbone

SonarQube

Checkmarx

Microsoft Defender

SIEM platforms

Job description

About the Job:We are seeking an Information Security Analyst to support our cybersecurity operations, vulnerability management, security monitoring, risk assessment, and compliance activities. The role will focus on identifying and remediating security risks, monitoring security events, conducting vulnerability assessments, maintaining security processes and policies, and preparing security performance reports for management.

Job Requirements:

• 0–3 years of experience in Information Security, Cybersecurity, IT Security, or a related field.
• Hands-on experience or working knowledge of vulnerability assessment and security tools such as Qualys, OpenVAS/Greenbone, SonarQube, Checkmarx, Microsoft Defender, and SIEM platforms.
• Working knowledge of Windows and Linux server security.
• Understanding of network security technologies including firewalls, routers, IDS/IPS, and network security monitoring.
• Working knowledge of Microsoft Azure security services, security policies, and cloud security controls.
• Good understanding of information security principles, cybersecurity controls, access control, encryption, security monitoring, and vulnerability management.
• Familiarity with security assessments, technology risk assessments, audits, and compliance requirements.
• Strong analytical and problem-solving skills.
• Good verbal and written communication skills, with the ability to explain technical security concepts to non-technical stakeholders.
• Certifications such as CISSP, CEH, OSCP, GIAC, or recognized cybersecurity/cloud-security certifications will be an advantage.

Key Responsibilities:

• Perform vulnerability assessments across servers, network devices, endpoints, applications, and cloud environments.
• Conduct internal and external vulnerability assessments using industry-standard security tools.
• Monitor and investigate security alerts from Microsoft Defender, SIEM, IDS/IPS, antivirus, and other security monitoring platforms.
• Review, validate, prioritize, and coordinate remediation of security vulnerabilities and security alerts based on business risk and severity.
• Conduct security monitoring across NIDS, HIDS, antivirus, SIEM, log management, and vulnerability scanning systems.
• Research security vulnerabilities, threats, and incidents and recommend appropriate mitigation measures.
• Coordinate information security risk assessments across business and technical functions.
• Support Azure security and policy management activities.
• Develop and maintain security policies, standards, procedures, and process documentation.
• Prepare security metrics, dashboards, risk indicators, vulnerability reports, and remediation progress reports for senior management.
• Collaborate with infrastructure, network, application, cloud, and technology teams to resolve security issues.
• Support security assessments, audits, compliance activities, and regulatory requirements.
• Maintain security documentation, assessment records, remediation plans, and audit evidence.
• Monitor emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices and recommend improvements to the organization's security posture.