Senior Cyber Security Analyst

Clarivate Analytics; Bengaluru; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

Clarivate is seeking a Senior Product Security & Vulnerability Management Engineer to lead vulnerability management, application security testing, and product security operations across the enterprise. The role partners with Product Engineering, DevOps and Cloud teams to prioritize, remediate, validate and report security risks across applications, cloud environments and pipelines.

The ideal candidate has 5+ years in cybersecurity/product security, hands-on experience with major tooling, and

Qualifications

• Five+ years in cybersecurity, product security, or vulnerability management.
• Experience with enterprise vulnerability management platforms (Qualys/Tenable/Rapid7).
• Experience with SAST/DAST/SCA and secrets scanning.
• Experience with GitHub Advanced Security, Checkmarx, Burp Suite.
• Ability to coordinate with engineering, DevOps, Cloud and tech ops teams.

Responsibilities

• Conduct in-depth analysis of security alerts to determine root cause and impact.
• Utilize incident response plans, containment, eradication, and recovery strategies.
• Lead investigations into security breaches, documenting findings and remediation recommendations.
• Assist in development and enforcement of security policies and best practices.
• Collaborate with cross-functional teams to assess security risks of new projects.
• Provide guidance and mentorship to junior security analysts.
• Monitor and analyze security logs to identify emerging threats and vulnerabilities.
• Stay updated on industry trends, threats, and best practices in cybersecurity.
• Create and maintain playbooks and SOPs.

Skills

Vulnerability management

Product security

Threat analysis

CI/CD security

Incident response

Cross-functional collaboration

Tools

Qualys

Tenable

Rapid7

GitHub Advanced Security

Checkmarx

Burp Suite

SAST/DAST

SCA

OWASP

Kubernetes

AWS

Job description

We are seeking a Senior Product Security & Vulnerability Management Engineer to lead vulnerability management, application security testing, and product security operations across the enterprise. This role will serve as the primary security partner to Product Engineering, DevOps, and Cloud teams, helping identify, prioritize, remediate, validate, and report security risks across applications, cloud environments, infrastructure, and software development pipelines. The ideal candidate combines hands-on technical expertise with strong program coordination skills. The role requires someone who can operate security tooling, challenge and validate findings, work effectively with engineering teams, and maintain enterprise-level visibility of remediation performance and risk.

About You – experience, education, skills, and accomplishments

• Minimum five years of experience in cybersecurity, product security, application security, vulnerability management, DevSecOps, or a closely related discipline.
• Hands-on experience operating an enterprise vulnerability management platform such as Qualys, Tenable, Rapid7, or an equivalent solution.
• Experience with application security testing, including SAST, DAST, SCA, secrets scanning, and Infrastructure as Code scanning.
• Experience with GitHub Advanced Security, Checkmarx, Burp Suite, or comparable technologies.
• Demonstrated ability to work directly with software engineering, DevOps, Cloud, and technology operations teams to triage and remediate findings.
• Working knowledge of secure software development, OWASP guidance, cloud security, modern CI/CD practices, and vulnerability remediation workflows.
• Experience coordinating third-party penetration tests and tracking findings through validation and closure.
• Ability to communicate technical risk clearly to engineering teams, control owners, GRC stakeholders, and leadership.
• Strong organizational skills and the ability to oversee multiple workstreams across a distributed enterprise.
• It would be great if you also had . . .
• Experience supporting AWS environments, containerized workloads, Kubernetes, and cloud-native application architectures.
• Experience with EASM, exposure management, attack-path analysis, or continuous threat exposure management capabilities.
• Experience designing or improving security checks in GitHub Actions or comparable CI/CD platforms.
• Familiarity with ISO 27001, SOC 2, PCI DSS, secure development controls, risk exceptions, and audit evidence requirements.
• Experience developing vulnerability management dashboards and metrics for both engineering and executive audiences.
• Experience or demonstrated interest in using AI, APIs, scripting, and workflow automation to improve vulnerability management reporting and operations.
• Relevant certifications such as CISSP, CSSLP, GIAC, OSCP, cloud security, or comparable credentials are beneficial but not required.

What will you be doing in this role?

• Conduct in-depth analysis of security alerts and incidents to determine the root cause and impact.
• Utilize incident response plans, including containment, eradication, and recovery strategies.
• Lead investigations into security breaches and incidents, documenting findings and recommendations for remediation.
• Assist in the development and enforcement of security policies, procedures, and best practices.
• Collaborate with cross-functional teams to assess security risks associated with new projects and initiatives.
• Provide guidance and mentorship to Level 1 Security Analysts, helping them enhance their skills and knowledge.
• Monitor and analyze security logs and data sources to proactively identify emerging threats and vulnerabilities.
• Stay abreast of industry trends, emerging threats, and best practices in cybersecurity.
• Play a key role in the creation and maintenance of playbooks and SOPs.

Job Location: Bangalore Work Mode: Hybrid (Monday to Friday)

At Clarivate, we are committed to providing equal employment opportunities for all qualified persons with respect to hiring, compensation, promotion, training, and other terms, conditions, and privileges of employment. We comply with applicable laws and regulations governing non-discrimination in all locations.

Clarivate is a global leader in trusted and transformative intelligence. We bring together enriched data, insights, analytics and workflow solutions, grounded in deep domain expertise across the spectrum of knowledge, research and innovation. Whether it’s providing insights to transform the water industry or accelerating the delivery of a critical vaccine, our aim is to fuel the world’s greatest breakthroughs by harnessing the power of human ingenuity. For more information, please visit clarivate.com