Senior Security Analyst

SHI Solutions India Pvt. Ltd.; Hyderabad; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

SHI Solutions India Pvt. Ltd. seeks an experienced Vulnerability Management Lead to steer enterprise-wide vulnerability operations.

You will drive discovery, risk prioritization, remediation governance and executive reporting across servers, endpoints, networks, and cloud environments. The ideal candidate has 6–10 years in cybersecurity, hands-on expertise with Tenable, Rapid7/InsightVM and Tanium, and prior leadership experience.

Qualifications

• 6–10 years of cybersecurity experience with vulnerability management.
• At least 2 years leading teams or programs in security operations.
• Hands-on with Tenable, Rapid7/InsightVM, Tanium and vulnerability assessment.
• Experience in executive reporting and stakeholder management.
• Exposure to TruOps, Cyberfusion, Okta, CyberArk, CrowdStrike and SentinelOne is preferred.
• Experience supporting US-based customers and working US business hours is preferred.

Responsibilities

• Lead the end-to-end Vulnerability Management programme across servers, endpoints, networks, cloud environments, applications, IAM and privileged access platforms.
• Define and manage vulnerability scanning strategies, authenticated scan coverage, remediation governance and exception management.
• Analyse and validate vulnerability findings from Tenable and Rapid7/InsightVM, prioritising risks by CVSS, exploitability, asset criticality and business impact.
• Collaborate with infrastructure, patch management, application, endpoint security and IAM teams to drive timely remediation.
• Track remediation SLAs, risk acceptance and compliance using TruOps or similar GRC platforms.
• Partner with patch management teams using Tanium and Automox migration workflows to ensure remediation.
• Develop and present executive dashboards and reports covering vulnerability trends, ageing, SLA compliance, remediation performance and asset coverage.
• Review identity and privileged access vulnerabilities involving Okta and CyberArk.
• Collaborate with endpoint security teams using CrowdStrike and SentinelOne to correlate vulnerability exposure with endpoint risks.
• Define and enhance vulnerability management processes, playbooks, operational runbooks and reporting standards.
• Lead weekly and monthly vulnerability review meetings with internal stakeholders and US-based customers.
• Mentor Vulnerability Management Engineers and review technical assessments, remediation recommendations and reporting.
• Ensure alignment with security frameworks such as NIST, CIS Controls, ISO 27001, and PCI-DSS.

Skills

Vulnerability management

Security operations

Leadership

Customer-facing

Executive reporting

CVSS analysis

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Tenable

Rapid7/InsightVM

Tanium

TruOps

Okta

CyberArk

CrowdStrike

SentinelOne

Automox

Power BI

Excel

Job description

We are seeking an experienced Vulnerability Management Lead with 6–10 years of cybersecurity experience to lead enterprise-wide vulnerability management operations. The role is responsible for driving vulnerability discovery, risk prioritisation, remediation governance, SLA management, executive reporting, and cross-functional coordination with infrastructure, application, IAM, endpoint security, and patch management teams. The ideal candidate will have strong hands-on expertise with Tenable, Rapid7/InsightVM, Tanium, TruOps, and related cybersecurity technologies, along with experience leading teams and supporting global customers.

Key Responsibilities

• Lead the end-to-end Vulnerability Management programme across servers, endpoints, networks, cloud environments, applications, IAM, and privileged access platforms.
• Define and manage vulnerability scanning strategies, authenticated scan coverage, remediation governance, and exception management.
• Analyse and validate vulnerability findings from Tenable and Rapid7/InsightVM, prioritising risks based on CVSS, exploitability, asset criticality, and business impact.
• Collaborate with infrastructure, patch management, application, endpoint security, and IAM teams to drive timely remediation.
• Track remediation SLAs, risk acceptance, and compliance using TruOps or similar GRC platforms.
• Partner with patch management teams using Tanium and Automox migration workflows to ensure effective remediation.
• Develop and present executive dashboards and reports covering vulnerability trends, ageing, SLA compliance, remediation performance, and asset coverage.
• Review identity and privileged access vulnerabilities involving Okta and CyberArk.
• Collaborate with endpoint security teams using CrowdStrike and SentinelOne to correlate vulnerability exposure with endpoint risks.
• Define and enhance vulnerability management processes, playbooks, operational runbooks, and reporting standards.
• Lead weekly and monthly vulnerability review meetings with internal stakeholders and US-based customers.
• Mentor Vulnerability Management Engineers and review technical assessments, remediation recommendations, and reporting.
• Ensure alignment with security frameworks such as NIST, CIS Controls, ISO 27001, and PCI-DSS.

Required Skills & Experience

• 6–10 years of experience in Cybersecurity, Vulnerability Management, Security Operations, or Infrastructure Security.
• Minimum 2 years of experience leading teams, coordinating security operations, or managing vulnerability programmes.
• Strong hands-on experience with Tenable, Rapid7/InsightVM, Tanium, vulnerability assessment, CVE/CVSS analysis, remediation governance, and SLA management.
• Experience in executive reporting, stakeholder management, and customer-facing engagements.
• Exposure to TruOps, Cyberfusion, Okta, CyberArk, CrowdStrike, and SentinelOne is highly preferred.
• Experience supporting US-based customers and working during US business hours is preferred.

Tools & Technologies

• Vulnerability Management: Tenable, Rapid7/InsightVM
• Patch Management: Tanium, Automox
• IAM/PAM: Okta, CyberArk
• Reporting & Ticketing: Power BI, Excel, ServiceNow, Jira

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline (or equivalent experience).
• Preferred certifications include CISSP, CISM, CompTIA Security+, CySA+, CEH, GSEC, Tenable, Rapid7, ITIL Foundation, or equivalent industry certifications.