IT & Data Vulnerability Analyst

Infosys; Hyderabad; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Infosys in Hyderabad is seeking a Vulnerability Management Analyst to strengthen the organization's vulnerability program. You will identify, assess, prioritize, and track vulnerabilities across infrastructure, apps, cloud, databases, and endpoints while collaborating with security teams to drive remediation and reduce cyber risk.

The ideal candidate has hands-on vulnerability assessment experience, risk-based prioritization skills, and strong stakeholder engagement within an enterprise

Qualifications

• MUST have hands-on vulnerability assessment experience.
• Ability to assess risk using CVSS and threat intel.
• Knowledge of operating systems, networks, databases and cloud environments.
• Understanding of cyber risk and threat intelligence concepts.
• Experience with reporting, analytics and dashboard management.

Responsibilities

• Perform vulnerability scans across infrastructure, applications, cloud, and endpoints.
• Analyze vulnerabilities and prioritize risk using CVSS and business impact.
• Coordinate remediation activities with internal stakeholders and timelines.
• Validate vulnerability fixes and closure.
• Maintain dashboards, reports and remediation SLA metrics.
• Support risk acceptance and exception processes.

Skills

Vulnerability management

CVSS scoring & prioritization

IT security risk understanding

Risk-based remediation tracking

Reporting, analytics & dashboards

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

We are seeking a Vulnerability Management Analyst to support the organization's vulnerability management program by identifying, assessing, prioritizing, and tracking security vulnerabilities across infrastructure, applications, cloud environments, databases, networks, and endpoints. The role requires close collaboration with technology and security teams to drive remediation efforts, reduce cyber risk exposure, maintain security compliance, and provide actionable risk insights through reporting and analytics. The ideal candidate will have hands-on experience with vulnerability assessment tools, risk-based prioritization methodologies, remediation tracking, and stakeholder engagement within an enterprise environment.

Key Responsibilities

• Perform vulnerability scans across infrastructure, applications, cloud environments, and endpoints.
• Analyze vulnerabilities and assess risk using CVSS scoring, threat intelligence, and business impact.
• Coordinate and track remediation activities with internal stakeholders.
• Validate vulnerability fixes and closure.
• Maintain dashboards, reports, and remediation SLA metrics.
• Support risk acceptance and exception management processes.

Required Skills

• Vulnerability Management and Assessment.
• CVSS scoring and risk prioritization.
• Knowledge of operating systems, networks, databases, and cloud environments.
• Understanding of cyber risk and threat intelligence.
• Reporting, analytics, and dashboard management.

Good to Have

• Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management.
• Patch Management and Vulnerability Remediation.
• Attack Surface Management (ASM).
• Exposure Management platforms.
• PowerShell or Python scripting.

Behavioral Competencies

• Strong stakeholder management and project coordination.
• Analytical and problem-solving skills.
• Process improvement mindset.
• Effective communication skills.