Senior IT Security Analyst

Wolters Kluwer; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Wolters Kluwer in Pune, India seeks a Senior IT Security Analyst to drive advanced cybersecurity initiatives with high autonomy. You will bolster vulnerability management, cloud security posture, and incident response across AWS/Azure/GCP, containers, and workloads, while guiding junior team members.

You will analyze security findings, coordinate remediation with cross-functional teams, and contribute to automation, dashboards, and reporting to strengthen security posture and threat detection

Qualifications

• 5–6 years of experience in cybersecurity, vulnerability management, cloud security, infrastructure security, or related domains.
• Good understanding of cloud security concepts across AWS, Azure, or GCP.
• Hands-on or working knowledge of CSPM tools such as Orca, Wiz, Prisma Cloud, Defender for Cloud, Lacework, or similar.
• Understanding of vulnerability management processes, including detection, prioritization, remediation tracking, SLA monitoring, and reporting.
• Familiarity with vulnerability scanners such as Rapid7, Qualys, Tenable, or similar.
• Good understanding of infrastructure security, including servers, operating systems, patching, network exposure, identity, and access controls.
• Basic understanding of containers and Kubernetes security, including container images, registries, clusters, namespaces, workloads, secrets, and runtime risks.
• Basic understanding of application security and shift-left practices, including SAST, DAST, SCA, CI/CD security, and secure coding concepts.
• Understanding of AI security concepts such as AI agents, connectors, data access, prompt injection, excessive permissions, and secure integration with enterprise tools.
• Ability to analyze security findings and translate them into clear remediation actions.
• Experience working with dashboards, Excel, Power BI, ServiceNow, Jira, or similar reporting and tracking tools.
• Basic scripting or automation experience using Python, PowerShell, Bash, KQL, SQL, or APIs.
• Strong communication skills with the ability to work with cloud, infrastructure, application, DevOps, and leadership teams.

Responsibilities

• Support vulnerability management across cloud, infrastructure, containers, Kubernetes, and apps.
• Review findings from CSPM, vulnerability scanners, container security, and app security platforms.
• Coordinate remediation with infrastructure, cloud, app, and DevOps teams.
• Assist cloud security posture management across AWS, Azure, or GCP environments.
• Manage EDR/XDR platforms: deploy, configure, and optimize tools for cross-layer telemetry and reduced silos.
• Detect and respond to threats by analyzing alerts, hunting attackers, and orchestrating automated playbooks.
• Review cloud misconfigurations, exposed resources, identity risks, network gaps, and compliance issues.
• Assist in container and Kubernetes security reviews including image vulnerabilities and workloads security.
• Prioritize vulnerabilities based on severity, exploitability, exposure, asset criticality, and business impact.
• Maintain dashboards, reports, trackers, and metrics for remediation and security posture.
• Contribute to automation of repetitive security tasks, reporting, data enrichment, and remediation workflows.
• Support basic application security and shift-left activities (SAST, DAST, SCA, CI/CD security).
• Assist with forensic analysis, incident triage, log review, and evidence collection when required.
• Contribute to AI security initiatives, including AI agents, connectors, data exposure, and cloud-hosted AI workloads.
• Coordinate with stakeholders to track remediation progress, exceptions, risk acceptance, and closure.

Skills

Cybersecurity

Vulnerability management

Cloud security

Infrastructure security

Threat detection & response

Security tooling

Dashboard/Reporting

Automation scripting

Communication skills

AI security concepts

Tools

Orca

Wiz

Prisma Cloud

Defender for Cloud

Lacework

Qualys

Tenable

Rapid7

Job description

About the Role:
As a Senior IT Security Analyst, you will engage in advanced cybersecurity tasks with a high level of autonomy. Your contributions will be crucial for maintaining a secure IT environment and anticipating potential threats. You’ll exercise thorough security measures and guide less experienced team members.

Key Responsibilities

• Support vulnerability management activities across cloud, infrastructure, containers, Kubernetes, and application environments.

• Review and analyze findings from security tools such as CSPM, vulnerability scanners, container security tools, and application security platforms.

• Work with infrastructure, cloud, application, and DevOps teams to drive remediation of identified security issues.

• Support cloud security posture management across AWS, Azure, or GCP environments.

• Manage EDR and XDR platforms : Deploy, configure, and optimize security tools to monitor endpoints, integrate cross-layered telemetry (cloud, network, and email), and eliminate security silos.

• Detect and respond to threats : Analyze advanced multi-vector alerts, hunt for hidden attackers, and orchestrate automated playbooks to rapidly isolate compromised systems and minimize response times.

• Review cloud misconfigurations, exposed resources, identity risks, network security gaps, and compliance issues.

• Assist in container and Kubernetes security reviews, including image vulnerabilities, runtime exposure, cluster configuration, and workload security.

• Support vulnerability prioritization based on severity, exploitability, exposure, asset criticality, and business impact.

• Help maintain dashboards, reports, trackers, and metrics for vulnerability remediation and security posture.

• Contribute to automation of repetitive security tasks, reporting, data enrichment, and remediation workflows.

• Support basic application security and shift-left activities, including SAST, DAST, SCA, dependency risks, and secure development awareness.

• Assist with basic forensic analysis, incident triage, log review, and evidence collection when required.

• Contribute to emerging AI security initiatives, including understanding risks around AI agents, connectors, cloud-hosted AI workloads, data exposure, and infrastructure security.

• Coordinate with multiple stakeholders to track remediation progress, exceptions, risk acceptance, and closure.
  

Required Skills and Experience

• 5–6 years of experience in cybersecurity, vulnerability management, cloud security, infrastructure security, or related domains.

• Good understanding of cloud security concepts across AWS, Azure, or GCP.

• Hands-on or working knowledge of CSPM tools such as Orca, Wiz, Prisma Cloud, Defender for Cloud, Lacework, or similar.

• Understanding of vulnerability management processes, including detection, prioritization, remediation tracking, SLA monitoring, and reporting.

• Familiarity with vulnerability scanners such as Rapid7, Qualys, Tenable, or similar.

• Good understanding of infrastructure security, including servers, operating systems, patching, network exposure, identity, and access controls.

• Basic understanding of containers and Kubernetes security, including container images, registries, clusters, namespaces, workloads, secrets, and runtime risks.

• Basic understanding of application security and shift-left practices, including SAST, DAST, SCA, CI/CD security, and secure coding concepts.

• Understanding of AI security concepts such as AI agents, connectors, data access, prompt injection, excessive permissions, and secure integration with enterprise tools.

• Ability to analyze security findings and translate them into clear remediation actions.

• Experience working with dashboards, Excel, Power BI, ServiceNow, Jira, or similar reporting and tracking tools.

• Basic scripting or automation experience using Python, PowerShell, Bash, KQL, SQL, or APIs.

• Strong communication skills with the ability to work with cloud, infrastructure, application, DevOps, and leadership teams.
  

Good to Have

• Exposure to Kubernetes security tools, container scanning, runtime security, or CNAPP platforms.

• Experience with ServiceNow Vulnerability Response, Jira, Power BI, Snowflake, or similar enterprise reporting platforms.

• Familiarity with MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, OWASP LLM Top 10, CIS Benchmarks, NIST, or cloud security frameworks.

• Understanding of forensic basics such as log analysis, endpoint artifacts, timeline review, and incident evidence handling.

• Experience with automation of vulnerability reporting, data cleanup, ticket enrichment, or remediation workflows.

• Exposure to AI security, GenAI governance, MCP/connectors, agentic workflows, or AI infrastructure security.

Our Interview Practices

To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts. Our interview process is designed to assess your individual skills, experiences, and communication style. We value authenticity and want to ensure we’re getting to know you—not a digital assistant. To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process. Please note that use of AI-generated responses or third-party support during interviews will be grounds for disqualification from the recruitment process.

Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.