Security Vulnerability Analyst

Experian Group; Hyderabad; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

PVH in India’s Hyderabad chapter is seeking a security analyst focused on vulnerability management to join our risk team. You will work with infrastructure, application, and cloud groups to assess vulnerabilities, track remediation, and ensure timely fixes according to SLAs.

The ideal candidate has 2–5+ years in security, hands-on with Nessus/Qualys/InsightVM, strong reporting skills, and the ability to communicate risk to technical and leadership audiences.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• 2-5+ years of experience in vulnerability management, cybersecurity, or information security.
• Experience with vulnerability management tools such as Tenable Nessus, Qualys VMDR, Rapid7 InsightVM, Microsoft Defender Vulnerability Management, Wiz.IO, Axonius, and Panaseer.
• Understanding of CVSS scoring, CWE, CVE, MITRE ATT&CK Framework, OWASP Top 10, common operating systems (Windows, Linux, macOS), and cloud platforms (AWS, Azure, or GCP).
• Understanding of patch management cycles and how they tie to remediation SLAs.
• Ability to analyze technical data and communicate risk effectively to both technical and non-technical stakeholders.
• Strong analytical, documentation, and problem-solving skills.
• Experience working across security domains (vulnerability management, plus possibly identity, endpoint, or compliance metrics) is a plus.

Responsibilities

• Work with infrastructure, application, and cloud teams to assess and maintain the usability and efficacy of vulnerability reporting.
• Assist in prioritizing remediation efforts using frameworks such as CVSS, EPSS, and organizational risk criteria.
• Coordinate vulnerability remediation and verify fixes in conjunction with infrastructure, application, and cloud teams.
• Advise on the feasibility of remediation efforts within established service-level agreements (SLAs).
• Monitor emerging vulnerabilities, zero-day threats, and vendor security advisories.
• Produce reports and dashboards that communicate vulnerability trends, risk metrics, and remediation status to technical teams and leadership.
• Assist with vulnerability exception reviews and risk acceptance documentation.
• Maintain vulnerability management processes, documentation, and standard operating procedures.
• Support compliance initiatives including PCI DSS, ISO 27001, SOC 2, NIST, HIPAA, or CIS Controls, as applicable.
• Participate in incident response by providing vulnerability analysis and remediation recommendations when needed.
• Recommend security reporting improvements that reduce recurring vulnerabilities and improve overall security posture.

Skills

Vulnerability management

Risk assessment

CVSS/CWE/CVE concepts

Security reporting

Stakeholder communication

Analytical skills

Scripting (PowerShell/Python)

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Tenable Nessus

Qualys VMDR

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

Wiz.IO

Axonius

Panaseer

Job description

Responsibilities

• Work with infrastructure, application, and cloud teams to assess and maintain the usability and efficacy of vulnerability reporting.
• Assist in prioritizing remediation efforts using frameworks such as CVSS, EPSS, and organizational risk criteria.
• Coordinate vulnerability remediation and verify fixes in conjunction with infrastructure, application, and cloud teams.
• Advise on the feasibility of remediation efforts within established service-level agreements (SLAs).
• Monitor emerging vulnerabilities, zero-day threats, and vendor security advisories.
• Produce reports and dashboards that communicate vulnerability trends, risk metrics, and remediation status to technical teams and leadership.
• Assist with vulnerability exception reviews and risk acceptance documentation.
• Maintain vulnerability management processes, documentation, and standard operating procedures.
• Support compliance initiatives including PCI DSS, ISO 27001, SOC 2, NIST, HIPAA, or CIS Controls, as applicable.
• Participate in incident response by providing vulnerability analysis and remediation recommendations when needed.
• Recommend security reporting improvements that reduce recurring vulnerabilities and improve overall security posture.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• 2-5+ years of experience in vulnerability management, cybersecurity, or information security.
• Experience with vulnerability management tools such as Tenable Nessus, Qualys VMDR, Rapid7 InsightVM, Microsoft Defender Vulnerability Management, Wiz.IO, Axonius, and Panaseer.
• Understanding of CVSS scoring, CWE, CVE, MITRE ATT&CK Framework, OWASP Top 10, common operating systems (Windows, Linux, macOS), and cloud platforms (AWS, Azure, or GCP).
• Understanding of patch management cycles and how they tie to remediation SLAs.
• Ability to analyze technical data and communicate risk effectively to both technical and non-technical stakeholders.
• Strong analytical, documentation, and problem-solving skills.
• Experience working across security domains (vulnerability management, plus possibly identity, endpoint, or compliance metrics) is a plus.

Preferred Qualifications

• Security certifications such as CompTIA Security+, CySA+, GSEC, CISSP, or GIAC certifications.
• Experience with scripting using PowerShell, Python, or Bash.
• Familiarity with SIEM, EDR, and SOAR platforms.
• Experience working in Agile or DevSecOps environments.
• Knowledge of vulnerability prioritization using threat intelligence and exploit data.

Experian is proud to be an Equal Opportunity and affirmative action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.