Senior Analyst - Threat & Vulnerability Management

Caterpillar Inc; Bengaluru; Sur place; INR 1 200 000 - 2 000 000; Plein temps

Résumé du poste

Caterpillar Inc. is seeking a Senior Analyst - Threat Vulnerability Management to lead vulnerability remediation governance and risk reporting across IT and security functions.

You will collaborate with cybersecurity, infrastructure, applications, and business teams to meet remediation SLAs and reduce risk. The role requires deep experience with vulnerability tools, data analytics, and executive-level communication.

Qualifications

• 10-12 years of IT and Cybersecurity experience.
• 5+ years in Vulnerability Management, Security Operations, Risk Management, or Cyber Defense.
• Hands-on with ServiceNow Vulnerability Response.
• Strong understanding of vulnerability lifecycle, risk assessment, and remediation workflows.

Responsabilités

• Lead end-to-end management of critical and high-risk vulnerabilities aligning with SLAs and security policies.
• Monitor vulnerability data from ServiceNow Vulnerability Response and scanning platforms to identify aged, recurring, and high-impact risks.
• Validate records, ownership mappings, assignment groups, risk scores, and remediation status.
• Drive accountability by coordinating remediation across infrastructure, cloud, network, application, and endpoints.
• Develop dashboards and KPIs to improve remediation effectiveness and reporting.

Connaissances

Vulnerability Management

Security Operations

Data Analytics

Executive Reporting

ServiceNow VR

Power BI

Excel

Stakeholder Mgmt

Formation

Bachelor's degree in Computer Science / Information Security / IT

Outils

Qualys

Tenable

Rapid7

Wiz

Microsoft Defender VM

Description du poste

Job Summary

We are seeking a skilled Senior Analyst - Threat Vulnerability Management to join Infrastructure Services - CAT IT Division.

The Senior Vulnerability Management Analyst is responsible for leading the identification, prioritization, tracking, and remediation governance of critical security vulnerabilities across the enterprise. This role serves as a key liaison between cybersecurity, infrastructure, application, and business teams to ensure vulnerabilities are remediated within established SLAs and organizational risk thresholds.

The Senior Analyst will leverage ServiceNow Vulnerability Response, security scanning platforms, and advanced reporting capabilities to drive accountability, improve remediation performance, identify systemic risks, and provide executive-level visibility into the organization's security posture. The role requires strong analytical, stakeholder management, and leadership communication skills, along with the ability to influence remediation outcomes across multiple technology teams.

What you will do

Vulnerability Management Remediation Governance

• Lead the end-to-end management of critical and high-risk vulnerabilities, ensuring remediation activities align with organizational SLAs and security policies.
• Monitor and analyze vulnerability data from ServiceNow Vulnerability Response and vulnerability scanning platforms to identify aged, recurring, and high-impact security risks.
• Validate vulnerability records, asset ownership mappings, assignment groups, risk scores, and remediation status.
• Drive accountability by assigning, tracking, and escalating remediation activities across infrastructure, cloud, network, application, and endpoint teams.
• Evaluate remediation plans, compensating controls, and exception requests to ensure appropriate risk treatment decisions.
• Support vulnerability prioritization using CVSS scores, exploitability, threat intelligence, business criticality, and asset context.

ServiceNow Administration Process Optimization

• Act as a subject matter expert for ServiceNow Vulnerability Response workflows and reporting.
• Develop and maintain dashboards, workflows, reports, and KPIs to improve vulnerability management effectiveness.
• Identify process inefficiencies and recommend automation opportunities to enhance tracking, reporting, and remediation activities.
• Partner with platform teams to improve vulnerability response processes and governance controls.

Stakeholder Management Collaboration

• Engage directly with technical teams, application owners, infrastructure teams, and business stakeholders to obtain remediation commitments and timelines.
• Facilitate remediation discussions, risk reviews, and vulnerability governance meetings.
• Provide guidance to stakeholders on vulnerability remediation best practices and prioritization strategies.
• Escalate SLA breaches, chronic offenders, and unresolved critical vulnerabilities to leadership and risk governance forums.
• Mentor junior analysts and provide guidance on vulnerability management processes and cybersecurity best practices.

Data Analytics Risk Reporting

• Perform advanced analysis of vulnerability trends, remediation performance, recurring findings, and ownership gaps.
• Develop metrics and reporting related to:
  • SLA compliance
  • Vulnerability aging
  • Risk exposure trends
  • Remediation effectiveness
  • Business unit performance
  • Executive risk posture
• Create and maintain dashboards using ServiceNow, Excel, Power BI, or similar reporting tools.
• Identify systemic issues and strategic improvement opportunities across security and IT operations.

Executive Communication Leadership Reporting

• Prepare executive-ready dashboards, scorecards, and presentations for cybersecurity and technology leadership.
• Present vulnerability trends, key risks, remediation progress, and strategic recommendations during governance and leadership reviews.
• Provide risk-based insights and recommendations to support decision-making and security investment priorities.
• Communicate complex technical findings to both technical and non-technical audiences.

What you will have

• 10-12 years of overall IT and Cybersecurity experience, with at least 5+ years focused on Vulnerability Management, Security Operations, Risk Management, or Cyber Defense functions.
• Hands-on experience with ServiceNow Vulnerability Response and/or ITSM platforms.
• Strong understanding of vulnerability management lifecycle, risk assessment methodologies, and remediation workflows.
• Experience working with enterprise vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or Microsoft Defender Vulnerability Management.
• Strong knowledge of:
  • CVSS scoring
  • Common vulnerabilities and exposures (CVEs)
  • Asset criticality
  • Patch management
  • Risk and exception management
• Advanced proficiency in Excel, Power BI, and PowerPoint.
• Experience interacting with senior leadership and presenting cybersecurity metrics and risk posture updates.
• Strong analytical, problem-solving, and stakeholder management skills.

Preferred Qualifications

• Bachelors degree in Computer Science, Information Security, Information Technology, or related field.
• Industry certifications such as:
  • CISSP
  • CISM
  • GSEC
  • Security+
  • CRISC
  • GIAC Vulnerability Management certifications
• Experience with cloud security platforms and cloud-native vulnerability management.
• Knowledge of cybersecurity frameworks and standards including:
  • NIST Cybersecurity Framework
  • CIS Controls
  • ISO 27001
  • PCI DSS
• Experience leading vulnerability governance programs in large enterprise environments.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.