IT&Data Vunerability Analyst

Infosys; Hyderabad; On-site; INR 800,000 - 1,400,000; Full time

Job summary

Infosys seeks an IT & Data Vulnerability Analyst to identify, assess, and track vulnerabilities across IT infrastructure, cloud, endpoints, and applications. You will drive proactive risk reduction by enabling timely remediation and providing visibility into threat exposure.

The role involves collaboration with security, infrastructure, and development teams to strengthen vulnerability management programs and reporting capabilities.

Qualifications

• Vulnerability management processes and tools.
• Vulnerability assessment methodologies.
• CVSS scoring and risk prioritization.
• Knowledge of operating systems, networks, databases, and cloud environments.
• Understanding of threat intelligence and cyber risk concepts.
• Reporting, analytics, and dashboard management.

Responsibilities

• Execute vulnerability scanning activities across infrastructure, applications, cloud, and endpoints.
• Analyze vulnerability assessment results and determine risk levels.
• Validate remediation activities and vulnerability closure.
• Assess vulnerability severity using CVSS, business criticality, threat intelligence, and exploitability.
• Prioritize remediation actions based on risk exposure.
• Support risk acceptance and exception management processes.
• Maintain vulnerability management dashboards and KPIs.
• Produce regular reports for technical teams and management.
• Track remediation performance against agreed SLAs.
• Collaborate with infrastructure, cloud, application, and security teams.
• Support vulnerability remediation planning and execution.
• Provide guidance on remediation best practices.
• Support implementation of Threat Exposure Management capabilities.
• Improve vulnerability management processes and reporting.
• Monitor emerging threats and critical vulnerabilities.

Skills

Vulnerability management

CVSS & risk prioritization

Threat intelligence basics

Reporting dashboards

Analytical skills

Stakeholder engagement

Multi-priority handling

Education

MCA

BCA + MCA integrated

Bachelor of Engineering

BCA

BSc

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

Job Description

Role Summary

The IT&Data Vulnerability Analyst is responsible for identifying, assessing, prioritizing, and tracking vulnerabilities across Danone's IT infrastructure, cloud environments, endpoints, applications, and digital assets. The role supports proactive cyber risk reduction by ensuring timely remediation of vulnerabilities and providing visibility into the organization's threat exposure.

Roles & Responsibilities

Key Responsibilities

Vulnerability Management Operations

• Execute vulnerability scanning activities across infrastructure, applications, cloud, and endpoints.
• Analyze vulnerability assessment results and determine risk levels.
• Validate remediation activities and vulnerability closure.

Risk Assessment & Prioritization

• Assess vulnerability severity using CVSS, business criticality, threat intelligence, and exploitability.
• Prioritize remediation actions based on risk exposure.
• Support risk acceptance and exception management processes.

Reporting & Metrics

• Maintain vulnerability management dashboards and KPIs.
• Produce regular reports for technical teams and management.
• Track remediation performance against agreed SLAs.

Stakeholder Collaboration

• Collaborate with infrastructure, cloud, application, and security teams.
• Support vulnerability remediation planning and execution.
• Provide guidance on remediation best practices.

Continuous Improvement

• Support implementation of Threat Exposure Management capabilities.
• Improve vulnerability management processes and reporting.
• Monitor emerging threats and critical vulnerabilities.

Required Skills & Competencies

Must Have

Functional & Technical Skills

• Vulnerability Management processes and tools.
• Vulnerability assessment methodologies.
• CVSS scoring and risk prioritization.
• Knowledge of operating systems, networks, databases, and cloud environments.
• Understanding of threat intelligence and cyber risk concepts.
• Reporting, analytics, and dashboard management.

Behavioral Competencies

• Strong analytical skills.
• Attention to detail.
• Stakeholder engagement capabilities.
• Problem-solving mindset.
• Ability to manage multiple priorities.

Technical Requirement

• Ability to manage multiple priorities.

Good to Have

Functional & Technical Skills

• Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management.
• Vulnerability remediation and patch management processes.
• Attack Surface Management (ASM).
• Exposure Management platforms.Automation and scripting (PowerShell, Python).
  

Behavioral Competencies

• Project coordination experience.
• Process improvement mindset.

Educational RequirementMCA,Intergrated course BCA+MCA,Bachelor of Engineering,BCA,BSc

Preferred SkillsTechnology->Cloud Security->AWS - Vulnerability Management,Technology->Application Security->Vulnerability Management,Technology->Cloud Security->Microsoft Azure - Infrastructure security->Microsoft Defender ATP,Technology->Risk Management->Risk Management System,Technology->Security Operations->SOAR

Service LineCyber Security