Information Security Incident Analyst - Bengaluru

Omnissa India Private Limited; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Omnissa India Private Limited in Bengaluru seeks a seasoned Product Security professional to lead vulnerability response, incident coordination, and security program governance across on-premises and cloud products.

You will drive AI-guided security workflows, coordinate with engineering, product, and legal teams, and translate business goals into resilient security strategies while communicating with executives.

Qualifications

• 6–12 years in product security, PSIRT, vulnerability response, or security incident response.
• Experience running or coordinating security incidents end to end.
• Familiarity with CVSS, CWE, CVE/CNA processes, SBOM, and ISO/IEC 29147/30111.
• Ability to translate business objectives into execution strategy.
• Excellent written and verbal communication, including executive briefings.

Responsibilities

• Own end-to-end vulnerability response and incident coordination for Omnissa products, including intake, triage, remediation, and disclosure.
• Act as incident coordinator for high-severity security events with cross-functional leadership.
• Coordinate security engineers and external stakeholders to remediate vulnerabilities within tight timelines.
• Design AI-assisted workflows for triage, analysis, and advisory drafting; monitor performance and data handling.

Skills

Product security

PSIRT

Vulnerability response

Incident response

Executive communication

Cross-functional collaboration

Education

Bachelor's degree in computer science or related field

Tools

SAST

SCA

Vulnerability scanners

GitHub/GitLab/Bitbucket

AI tooling in security operations

Job description

Job Description: We are Omnissa! The world is evolving fast, and organizations everywhere—from corporations to schools—are under immense pressure to provide flexible, work-from-anywhere solutions. They need IT infrastructure that empowers employees and customers to access applications from any device, on any cloud, all while maintaining top-tier security. That’s where Omnissa comes in. The Omnissa Platform is the first AI-driven digital work platform that enables smart, seamless and secure work experiences from anywhere. It uniquely integrates multiple industry-leading solutions including Unified Endpoint Management, Virtual Apps and Desktops, Digital Employee Experience, and Security & Compliance through common data, identity, administration, and automation services. Built on the vision of autonomous workspaces - self configuring, self-healing, and self-securing - Omnissa continuously adapts to the way people work; delivering personalized and engaging employee experiences, while optimizing security, IT operations and costs. we're experiencing rapid growth—and this is just the beginning of our journey! At Omnissa, we’re driven by a shared mission to maximize value for our customers. Our five Core Values guide us: Act in Alignment, Build Trust, Foster Inclusiveness, Drive Efficiency, and Maximize Customer Value—all with the aim of achieving shared success for our clients and our team. As a global private company with over 4,000 employees, we’re always looking for passionate, talented individuals to join us. If you're ready to make an impact and help shape the future of work, we’d love to hear from you!

What is the opportunity?

Required Skills 6 to 12 years in product security, PSIRT, vulnerability response, or security incident response, including coordination of multi-team remediation under time pressure. Hands-on experience running or coordinating security incidents and vulnerability disclosures end to end. Working knowledge of CVSS, CWE, CVE/CNA processes, VEX, SBOM, and ISO/IEC 29147 and 30111 concepts. Ability to investigate vulnerabilities and exploits and understand common classes (OWASP Top 10, CWE Top 25). Practical experience using AI tooling in security operations workflows, with sound judgment on validation and data protection. Ability to translate business objectives into execution strategy and prioritize in a dynamic environment. Excellent written and verbal communication, including executive briefings. Self-motivated and effective across functional teams. Bachelor's degree in computer science, information systems, risk management, or a similar field strongly preferred .

The Work

• Vulnerability response and incident coordination Own end-to-end coordination of externally reported and actively exploited product vulnerabilities, from intake and triage through remediation, coordinated disclosure, and customer communication, for on-premises and SaaS products. Act as incident coordinator for high-severity product security events: set severity, run the bridge, assign owners, track timelines, and drive decisions with Engineering, Product, Support, Legal, and Communications. Coordinate security engineers and external stakeholders (researchers, CERTs, vendors, customers, coordinators) to remediate high-profile vulnerabilities within tight timeframes. Run coordinated disclosure, including embargo management, CVE assignment, advisory publication, and researcher relations. Perform RCCA and post-incident reviews, and present findings and trends to executive staff.
• AI-driven vulnerability operations Design, deploy, and govern AI-assisted workflows for intake deduplication, triage, exploitability and impact analysis, severity scoring, and advisory drafting, with human review at decision points. Evaluate and operationalize AI-enabled tooling and automation to raise speed and scale while managing accuracy, hallucination, data handling, and tenant-isolation risks. Triage and respond to the rising volume of AI-generated vulnerability reports, including low-quality submissions, and to AI-accelerated exploitation that shortens the time from disclosure to attack. Assess and coordinate response to vulnerabilities in AI features and components shipped in Omnissa products (for example prompt injection, model and agent integrations, and AI supply chain dependencies). Define metrics for AI-assisted operations: time to triage, time to remediate, false positive rate, and report quality.
• Program and process Build and maintain process, policy, and runbook documentation; identify and implement team improvements. Define and report program roadmap, status, and success metrics (SLAs, backlog, aging, disclosure timelines). Support regulatory and customer obligations tied to vulnerability handling and disclosure (for example EU Cyber Resilience Act reporting, CNA responsibilities, customer and audit inquiries). Answer customer and field "am I impacted by CVE X" inquiries using SBOM, scanner, and threat intelligence data. Monitor threat intelligence, exploit activity, and KEV-class signals to maintain situational awareness and drive prioritization. Engage the security community: researchers, bug bounty participants, vendors, and conferences. Work with stakeholders from engineering to executive level.

Preferred Skills

Prior software engineering or architecture experience, including secure coding practices. Scripting or automation skills (Python, APIs, Jira/Confluence automation) to build workflows. Experience with SAST, SCA, and vulnerability scanners, and code platforms (GitHub, GitLab, Bitbucket). Experience with bug bounty or vulnerability disclosure programs. Customer-facing experience. Experience with Jira Service Management and Confluence. Relevant certifications (for example FIRST PSIRT Services Framework training, GCIH, GCFA, CISSP) are a plus.

About Omnissa

Omnissa is the digital work platform leader, trusted by thousands of organizations worldwide as the former VMware End-User Computing business. We make digital work, work – for businesses and their people. No painful IT processes or productivity trade-offs. Instead, a seamlessly delivered digital employee experience that simplifies work. Our comprehensive digital work platform enables IT teams to provide secure, personalized experiences for every employee, on any device. Omnissa unifies, automates, and efficiently scales the digital workspace. By empowering employees to do their best work, anywhere, we help workforces everywhere unlock exponential business value. All is made possible with the Omnissa™ Platform, the first AI-driven digital work platform for smart, seamless, and secure work experiences from anywhere. It integrates multiple industry-leading solutions across Unified Endpoint Management, Virtual Desktops and Apps, Digital Employee Experience, and Security and Compliance. By continuously adapting to users’ work styles, Omnissa optimizes user experience, security, IT operations and costs. Recognized as 2025 Digital Workplace Company of the Year 2025 InfoWorld Awards Finalist – App Volumes RemoteTech Breakthrough Award Winner – Digital Workplace Company of the Year CRN Product of the Year Finalist – Omnissa Horizon (DaaS)

Commitment to Diversity and Inclusion

Omnissa is committed to building a workforce that reflects the communities we serve across the globe. We believe this brings unique perspectives, experiences, and ideas, which are essential for driving innovation and achieving business success. We hire based on merit and with equal opportunity for all.