IT&Data Vunerability Analyst

Infosys Limited; Telangana; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Infosys Limited in Hyderabad is seeking an IT & Data Vulnerability Analyst with 5–8 years of experience to manage vulnerability processes across infrastructure, apps, cloud and endpoints. The role involves CVSS-driven risk assessment, remediation validation, and KPI reporting.

You will collaborate with security and IT teams, maintain dashboards, and drive continuous improvement in exposure management and threat intel integration to reduce risk.

Qualifications

• 5–8 years of experience in vulnerability management.
• Experience across infrastructure, applications, cloud and endpoints.
• Knowledge of CVSS scoring and risk prioritization.
• Ability to design and maintain vulnerability dashboards and KPIs.
• Excellent analytical and stakeholder engagement skills.

Responsibilities

• Execute vulnerability scanning across infrastructure, applications, cloud and endpoints.
• Analyze results and determine risk levels.
• Validate remediation and vulnerability closure.
• Perform risk assessment and prioritization.
• Monitor dashboards and report KPIs to management.
• Collaborate with IT, security and operations teams.

Skills

Vulnerability management

CVSS scoring

Threat intelligence

Risk prioritization

Dashboard reporting

Stakeholder engagement

Automation

Education

MCA

Integrated BCA+MCA

B.E./B.Tech

BCA

BSc

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

HYDERABAD, Infosys Limited IT&Data Vunerability Analyst

Job ID/Reference Code INFSYS-EXTERNAL-253960

Work Experience 5 - 8 Years

Job Title IT&Data Vunerability Analyst

Educational Requirements

MCA,Intergrated course BCA+MCA,Bachelor of Engineering,BCA,BSc

Service Line

Cyber Security

Responsibilities

• Key ResponsibilitiesVulnerability Management Operations
• Execute vulnerability scanning activities across infrastructure, applications, cloud, and endpoints.
• Analyze vulnerability assessment results and determine risk levels.
• Validate remediation activities and vulnerability closure.
• Risk Assessment & Prioritization
• Assess vulnerability severity using CVSS, business criticality, threat intelligence, and exploitability.
• Prioritize remediation actions based on risk exposure.
• Support risk acceptance and exception management processes.
• Reporting & Metrics
• Maintain vulnerability management dashboards and KPIs.
• Produce regular reports for technical teams and management.
• Track remediation performance against agreed SLAs.
• Stakeholder Collaboration
• Collaborate with infrastructure, cloud, application, and security teams.
• Support vulnerability remediation planning and execution.
• Provide guidance on remediation best practices.
• Continuous Improvement
• Support implementation of Threat Exposure Management capabilities.
• Improve vulnerability management processes and reporting.
• Monitor emerging threats and critical vulnerabilities.

Required Skills & Competencies

• Must Have
• Functional & Technical Skills
• Vulnerability management processes and tools.
• Vulnerability assessment methodologies.
• CVSS scoring and risk prioritization.
• Knowledge of operating systems, networks, databases, and cloud environments.
• Understanding of threat intelligence and cyber risk concepts.Reporting, analytics, and dashboard management.
• Behavioral Competencies
• Strong analytical skills.
• Attention to detail.
• Stakeholder engagement capabilities.
• Problem-solving mindset.
• Ability to manage multiple priorities.

Technical and Professional Requirements

• Ability to manage multiple priorities.
• Good to HaveFunctional & Technical Skills
• Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management.
• Vulnerability remediation and patch management processes.
• Attack Surface Management (ASM).
• Exposure Management platforms.
• Automation and scripting (PowerShell, Python).
• Behavioral Competencies
• Project coordination experience.
• Process improvement mindset.

Preferred Skills

Technology->Application Security->Vulnerability Management Technology->Risk Management->Risk Management System Technology->Security Operations->SOAR Technology->Cloud Security->Microsoft Azure - Infrastructure security->Microsoft Defender ATP Technology->Cloud Security->AWS - Vulnerability Management