Looking For Vulnerability Analyst

Tech Mahindra Limited; Hyderabad, Pune District, Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Tech Mahindra Limited in Hyderabad is seeking a security operations professional to run recurring vulnerability scans across networks, on‑premises, cloud assets, and containers, using tools like Nessus, Qualys, or OpenVAS. You will evaluate findings by severity and asset criticality to help prioritize remediation efforts.

The role includes coordinating patches with IT and engineering, preparing trend reports and KPIs, and documenting runbooks to align with ISO 27001, SOC 2, and PCI‑DSS.

Responsibilities

• Execute recurring vulnerability scans across networks, on‑premises, cloud assets (AWS, GCP, Azure), and containers using tools like Nessus, Qualys, or OpenVAS.
• Evaluate findings based on severity, exploitability, asset criticality, and threat intelligence to prioritize remediation work.
• Coordinate remediation and patching with IT operations, engineering, and product teams to apply patches or deploy compensatory controls.
• Prepare trend reports and KPIs, and communicate security posture to technical and executive stakeholders.
• Maintain runbooks, playbooks, and ensure compliance with ISO 27001, SOC 2, or PCI-DSS.

Job description

• Scanning & Discovery: Execute recurring and on-demand vulnerability scans across networks, on-premises, cloud assets (AWS, GCP, Azure), and containers using tools like Nessus, Qualys, or OpenVAS.
• Prioritization & Risk Analysis: Evaluate findings based on severity, exploitability, asset criticality, and threat intelligence (such as the CISA Known Exploited Vulnerabilities catalog).
• Remediation & Patch Coordination: Partner with IT operations, engineering, and product teams to prioritize and apply security patches or deploy compensatory controls.
• Reporting & Metrics: Prepare trend reports, track key performance indicators (KPIs), and communicate security posture to technical and executive stakeholders.
• Documentation & Compliance: Maintain operational runbooks, playbooks, and compliance alignment with standards like ISO 27001, SOC 2, or PCI-DSS

Work from office