ITandData Vunerability Analyst

Infosys; Hyderabad; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Infosys Hyderabad is seeking a dedicated Vulnerability Management professional to join our security operations. You will execute scans across infrastructure, cloud, and endpoints, assess risk using CVSS, and guide remediation with stakeholders.

Strong scripting and reporting skills are essential for maintaining dashboards and driving continuous improvement. Ideal candidates will have experience with multiple vulnerability tools and a solid understanding of threat intelligence to prioritize

Qualifications

• Proficient in vulnerability management concepts and lifecycle.
• Strong knowledge of CVSS scoring and risk prioritization.
• Experience with vulnerability assessment methodologies.
• Knowledge of OS, networks, databases, and cloud environments.
• Understanding of threat intelligence and cyber risk concepts.
• Strong reporting, analytics and dashboard management skills.
• Scripting in PowerShell or Python.

Responsibilities

• Execute vulnerability scanning activities across infrastructure, applications, cloud, and endpoints.
• Analyze vulnerability assessment results and determine risk levels.
• Validate remediation activities and vulnerability closure.
• Assess vulnerability severity using CVSS, business criticality, threat intelligence, and exploitability.
• Prioritize remediation actions based on risk exposure.
• Maintain vulnerability management dashboards and KPIs.
• Produce regular reports for technical teams and management.
• Collaborate with infrastructure, cloud, application, and security teams.
• Support vulnerability remediation planning and execution.

Job description

Job Description:

• Ability to manage multiple priorities. Good to Have Functional & Technical Skills
• Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management.
• Vulnerability remediation and patch management processes.
• Attack Surface Management (ASM).
• Exposure Management platforms.
• Automation and scripting (PowerShell, Python). Behavioral Competencies
• Project coordination experience.
• Process improvement mindset.

Key Responsibilities Vulnerability Management Operations

• Execute vulnerability scanning activities across infrastructure, applications, cloud, and endpoints.
• Analyze vulnerability assessment results and determine risk levels.
• Validate remediation activities and vulnerability closure. Risk Assessment & Prioritization
• Assess vulnerability severity using CVSS, business criticality, threat intelligence, and exploitability.
• Prioritize remediation actions based on risk exposure.
• Support risk acceptance and exception management processes. Reporting & Metrics
• Maintain vulnerability management dashboards and KPIs.
• Produce regular reports for technical teams and management.
• Track remediation performance against agreed SLAs. Stakeholder Collaboration
• Collaborate with infrastructure, cloud, application, and security teams.
• Support vulnerability remediation planning and execution.
• Provide guidance on remediation best practices. Continuous Improvement
• Support implementation of Threat Exposure Management capabilities.
• Improve vulnerability management processes and reporting.
• Monitor emerging threats and critical vulnerabilities. Required Skills & Competencies Must Have Functional & Technical Skills
• Vulnerability Management processes and tools.
• Vulnerability assessment methodologies.
• CVSS scoring and risk prioritization.
• Knowledge of operating systems, networks, databases, and cloud environments.
• Understanding of threat intelligence and cyber risk concepts.
• Reporting, analytics, and dashboard management. Behavioral Competencies
• Strong analytical skills.
• Attention to detail.
• Stakeholder engagement capabilities.
• Problem-solving mindset.
• Ability to manage multiple priorities.

Requirements: