Senior Analyst - Vulnerability Management

SGS Société Générale de Surveillance SA; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

SGS Société Générale de Surveillance SA in Bengaluru seeks a Senior Vulnerability Management Specialist to guide cyber security risk prioritization, leverage detection tools, and drive remediation across complex information systems.

You will lead crisis response for critical and zero-day vulnerabilities, coordinate with cross‑functional teams, and use automation (PowerBI, Python) to report findings and strengthen controls.

Qualifications

• Minimum 5+ experience with hands-on vulnerability detection tools such as Tenable, Nessus or Qualys.
• Vulnerability Management processes and standards.
• Exploitation concepts.
• Knowledge of vulnerability management frameworks and concepts such as CVE, CVSS and EPSS.
• Automation skills for quick reporting—PowerBI and Python scripting.
• Hands-on experience across Vulnerability Management, Policy Compliance, Web App Scanning, Cloud Agent and Asset View.
• Excellent verbal and written communication to report findings and collaborate with teams.

Responsibilities

• Manage complex information systems to understand and prioritize Cyber Security actions.
• Drive prioritization of vulnerabilities using a group SVM standards approach.
• Lead crisis management for critical and zero-day vulnerabilities through closure and updates.
• Triage vulnerabilities and ensure mitigation measures are implemented with follow-up.
• Identify and leverage threat intelligence sources to inform mitigation measures.

Skills

Vulnerability management

Threat intelligence

Automation (PowerBI, Python)

Communication skills

CVE/CVSS knowledge

Tools

Tenable

Nessus

Qualys

Job description

Responsibilities

ResponsibilitiesManage complex information systems to understand and prioritize actions on Cyber Security risks, audit requirements and data value, and provide guidance to vulnerability management team membersFlexible to work in 24/7 supportDrive prioritization of vulnerabilities through a group SVM standards approach, to meet common organizational objectives such as regulatory compliance and audit functionsManage and Lead Crisis for super critical and zero-day vulnerabilities, from invoking the crisis till the closure and regular updates to management, BISO and CIOs of the groupManage the triage of vulnerabilities, ensuring mitigation measures are implemented, follow -up till its closurestrategies and provide advice on complex configuration changes in support of vulnerability remediationProactively identify and leverage threat intelligence sources to inform strategic vulnerability mitigation measures

Profile required

• Minimum 5+ experience with Hands on any detection tool like Tenable, Nessus, Qualys etc..
• Vulnerability Management processes and standards
• Exploitation concepts
• Knowledge of vulnerability management frameworks and concepts such as CVE, and CVSS scoring systems and EPSS
• Automation Skills – For quick reporting, PowerBI, Python Scripting etc
• Hands on experience on Vulnerability Management, Policy Compliance, Web Application Scanning, Cloud Agent, Asset View
• Excellent verbal and written communication skills to effectively report findings and collaborate with cross-functional teams.

Why join us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status

Business insight

At Société Générale, we are convinced that people are drivers of change, and that the world oftomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.Whether you’re joining us for a period of months, years or your entire career, together we can havea positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on adaily basis and develop or strengthen your expertise, you will feel right at home with us!Still hesitating?You should know that our employees can dedicate several days per year to solidarity actions duringtheir working hours, including sponsoring people struggling with their orientation or professionalintegration, participating in the financial education of young apprentices and sharing their skills withcharities. There are many ways to get involved.