Lead Associate, Information Security

BetaNXT Inc.; Bengaluru; On-site; INR 1,500,000 - 2,700,000; Full time

Job summary

BetaNXT Inc. in Bengaluru, India, is seeking a Lead Associate / Cybersecurity Engineer to own the Vulnerability & Exposure Management program and contribute to PKI/Certificate Lifecycle Management and DLP/Data Classification initiatives.

This execution-focused role requires organizing, prioritizing, and driving remediation across engineering teams that don’t report to you. The role emphasizes growth into broader security engineering and program leadership, with a focus on orchestrating

Qualifications

• 3.5+ years of information security experience with hands-on vulnerability management.
• ],
• job_responsibilities_description:[

Responsibilities

• Vulnerability & Exposure Management – Primary Focus.
• Serve as day-to-day counterpart to the Vulnerability Management lead, handling triage of findings from VMDR/TruRisk, GitLab Ultimate, and CyCognito.
• Segment and prioritize triaged findings by business unit using asset criticality and EPSS/KEV.
• Build remediation plans and drive them to closure with engineering teams.
• Apply project/delivery-management discipline to remediation portfolio with trackers and burn-downs.
• Contribute to RBVM/CTEM program governance and reporting.
• PKI & Certificate Lifecycle Management support and tooling (Venafi).
• Maintain certificate inventory across on-prem and cloud, renewals, revocation workflows.
• Coordinate with DXC and internal infrastructure on certificate changes and CLM ownership.
• Data Loss Prevention & Data Classification support across email, endpoint, and cloud (Purview).
• Assist with data labeling and protecting sensitive client/company data.
• Investigate DLP alerts and refine policies to reduce noise while preserving coverage.
• Document InfoSec processes, runbooks, and SOPs as bandwidth allows.
• Participate in incident response, security architecture reviews, and audit requests.
• Pursue adjacent skills (cloud security, IAM, security architecture, automation) as the program grows.

Skills

Vulnerability Management

PKI / Certificate Lifecycle

Data Loss Prevention

Data Classification

RBVM / CTEM

Incident Response

Security Architecture

IAM / Access Management

Automation & Scripting

Cross-Functional Collaboration

Tools

Venafi

Microsoft Purview

GitLab Ultimate

CyCognito

Qualys VMDR

Job description

This role is being created to backfill a resigning Senior Associate, Information Security with 3.5 yrs of experience at BetaNXT, and it is being redefined with a sharper mandate. The Lead Associate / Cybersecurity Engineer will own day-to-day execution of BetaNXT's Vulnerability & Exposure Management program — the single highest-priority function in this role — while also contributing to PKI/Certificate Lifecycle Management and Data Loss Prevention (DLP) / Data Classification initiatives. This is an execution and delivery role as much as a technical one: success depends on the ability to organize, prioritize, and personally drive remediation work across engineering teams that do not report to this person.

We are looking for someone with genuine passion, ambition — someone who treats this role as a launchpad to grow into broader security engineering and program leadership responsibility, not a fixed job description.

Key Responsibilities

• Vulnerability & Exposure Management — Primary Focus
• Serve as the day-to-day counterpart to DXC's Vulnerability Management lead, running a recurring, evidence-based triage cadence across findings from Qualys VMDR/TruRisk, GitLab Ultimate (SDLC/dependency findings), and CyCognito (external attack surface).
• Segment and prioritize triaged findings by business unit (Beta, Maxit, Mediant, Delta Data), applying asset criticality, exploitability signals (EPSS/KEV), and business context rather than raw severity counts alone.
• Build remediation plans with each BU's technology and development engineering teams, and personally drive them to closure — this requires the judgment and persistence to negotiate realistic timelines and the persuasion skills to keep remediation moving with teams that have competing priorities and no reporting relationship to this role.
• Apply project/delivery-management discipline to the remediation portfolio: maintain trackers and burn-down views, flag at-risk items early, and escape clearly and factually to BU and technology leadership when a commitment is slipping.
• Contribute to the ongoing evolution of BetaNXT's Risk-Based Vulnerability Management (RBVM) / Continuous Threat Exposure Management (CTEM) program, including per-BU scorecards and monthly VM governance reporting to CLO/GRC leadership.
• PKI & Certificate Lifecycle Management
• Support the operation and continuous improvement of enterprise PKI and Certificate Lifecycle Management (CLM) tooling (e.g., Venafi), including issuance, automated renewal, and revocation workflows.
• Maintain an accurate certificate inventory across on-prem and cloud environments; proactively identify and remediate certificates that are expired, expiring, or improperly configured before they cause a production or client-facing incident.
• Coordinate with DXC and internal infrastructure owners on certificate-related change work and the broader CLM ownership transition.
• Data Loss Prevention & Data Classification
• Support configuration, tuning, and expansion of DLP controls (e.g., Microsoft Purview) across email, endpoint, and cloud channels.
• Assist with data classification efforts, partnering with BU and compliance stakeholders to identify, label, and appropriately protect sensitive client and company data.
• Investigate DLP alerts and turn recurring patterns into concrete policy or control refinements that reduce noise without reducing coverage.
• Knowledge Base & Documentation
• As bandwidth allows, streamline and document InfoSec processes, runbooks, and SOPs — starting with VM, PKI/CLM, and DLP workflows — so institutional knowledge is captured and transferable rather than held by one person.
• Program Support & Professional Growth
• Participate in incident response, security architecture reviews, and audit/compliance evidence requests as needed.
• Proactively pursue adjacent skills and stretch responsibilities (cloud security, IAM, security architecture, automation) as the program and this role mature — we are looking for someone who will outgrow the initial job description.

Must support US Eastern Timezone hours