IT Security Analyst II

Stefanini, Inc; Hyderabad; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Stefanini Group is hiring a Cyber Security Vulnerability Analyst to strengthen our SOC within the INFRA division in Hyderabad. The role centers on overseeing vulnerability management for multiple clients in an MSSP setup, driving risk-based prioritization and optimization of processes.

You will lead complex analyses, guide remediation efforts, and support audits while mentoring junior analysts. Strong English communication and CISSP/CISM/CEH considerations are a plus.

Qualifications

• 4+ years of experience in vulnerability management or security operations.
• Hands-on experience with vulnerability management platforms (Qualys, Nessus, Rapid7, Defender VA).
• Ability to translate vulnerability data into business risk insights and dashboards.
• Experience supporting audits, regulatory reviews, and executive reporting.

Responsibilities

• Lead vulnerability management service delivery for multiple clients in an MSSP environment.
• Act as primary escalation point for complex analysis, false positives, and high-risk findings.
• Perform risk, threat, and vulnerability analysis with context and business impact.
• Provide guidance on remediation, compensating controls, and risk acceptance decisions.
• Support audits and security reviews related to vulnerability management.
• Define and enforce vulnerability management processes, methodologies, and KPIs.
• Mentor junior analysts and contribute to automation and improvements.

Skills

Vulnerability management

Threat analysis

Leadership

Stakeholder management

English communication

Tools

Microsoft Defender VA

Qualys

Nessus

Rapid7

Job description

Join us to co-create solutions for a better future!

Job Details

Information Technology

IT Security Analyst II Hyderabad, TS Posted: 8/27/2026

Job Description Job ID#: 64763

Job Category: Information Technology

Position Type: Full Time

Remaining Positions: 2

Details:

Stefanini Group is looking for a Cyber Security Vulnerability Analyst to complement the technical capabilities of our Security Operations Center (SOC), part of Infrastructure Services (INFRA) Division.

As a Vulnerability Analyst, you will act as an expert and operational lead and will be responsible for overseeing vulnerability management service delivery, handling complex cases and escalations, providing strategic risk insights to clients, and ensuring the continuous improvement of vulnerability management processes across multiple customers.

Job Responsibilities

• Lead and oversee vulnerability management service delivery for multiple clients within an MSSP environment.
• Act as the primary escalation point for complex vulnerability analysis, false positives, and high-risk findings.
• Perform advanced risk, threat, and vulnerability analysis, including exploitation context and business impact assessment.
• Provide expert guidance on vulnerability remediation, compensating controls, and risk acceptance decisions.
• Support clients during audits, regulatory assessments, and security reviews related to vulnerability management.
• Define, optimize, and enforce vulnerability management processes, methodologies, and service standards.
• Ensure accurate prioritization of vulnerabilities based on business risk and threat landscape.
• Review and validate vulnerability reports, dashboards, and KPIs provided to clients and management.
• Collaborate with SOC, Incident Response, Threat Intelligence, and Architecture teams as needed.
• Mentor and provide technical guidance to junior and medium vulnerability analysts.
• Drive continuous improvement initiatives, automation, and optimization of vulnerability management services.
• Contribute to service strategy, tooling evaluations, and roadmap discussions.

Job Requirements Details

• 4+ years of experience in vulnerability management, threat management, or related security operations roles.
• Advanced hands-on experience with vulnerability management platforms (e.g., Microsoft Defender VA, Qualys, Nessus, Rapid7).
• Deep understanding of vulnerability classification, scoring methodologies, and risk-based prioritization.
• Strong knowledge of enterprise IT environments, networks, operating systems, and security controls.
• Experience supporting audits, compliance initiatives, and executive-level reporting.
• Ability to translate technical vulnerability data into business risk insights.
• Strong leadership, mentoring, and stakeholder management skills.
• Excellent written and verbal communication skills in English.
• Relevant advanced certifications (e.g., CISSP, CISM, CEH, OSCP, vendor expert-level certifications) are a strong plus.
• High level of autonomy, accountability, and professionalism.

Pay Range: Based on Experience