System Analyst

Gemini Consulting & Services; Hyderabad; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Gemini Consulting & Services seeks an experienced security professional to own the vulnerability management lifecycle across on-premises and cloud environments. You will lead hands-on assessments, validate scan results, and drive remediation with Infrastructure, Cloud, Network, and DevOps teams.

The role requires 5+ years in vulnerability management or security operations, with strong risk-based prioritization and broad knowledge of Windows/Linux security and endpoint protection.

Qualifications

• 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or related security domain.
• Hands-on experience in vulnerability assessment and vulnerability management.
• Strong understanding of risk assessment and risk-based vulnerability prioritization beyond CVSS.
• Ability to analyze, investigate, and validate vulnerability scan results.
• Strong knowledge of endpoint security and remediation.
• Good understanding of Windows and Linux OS from a security perspective.

Responsibilities

• Own and manage the end-to-end vulnerability management lifecycle from identification through remediation and closure.
• Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud, networks, and applications.
• Analyze vulnerability scan results, identify false positives, and determine actual exposure.
• Prioritize remediation based on asset criticality and business impact.
• Coordinate remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams.
• Maintain vulnerability dashboards, reports, and risk documentation.

Skills

Vulnerability Management

Security Operations

Cybersecurity

Risk Assessment

Endpoint Security

Windows OS

Linux OS

Networking

Application Security

Tools

Wiz

CrowdStrike

Nexpose / Rapid7

Splunk

AppSpider

ServiceNow

Job description

• Own and manage the end-to-end vulnerability management lifecycle, from identification and validation through remediation and closure.
• Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud environments, networks, and applications.
• Analyze and validate vulnerability scan results, including identifying false positives and determining actual exposure.
• Perform risk-based vulnerability prioritization considering factors beyond CVSS/severity, including asset criticality, business impact, exploitability, exposure, and active exploitation.
• Investigate vulnerabilities across Windows and Linux environments and coordinate appropriate remediation activities.
• Assess security vulnerabilities across cloud and endpoint environments.
• Define technical remediation and mitigation steps and work with relevant teams to implement them.
• Document technical findings, evidence, risk, business impact, and recommended remediation actions.
• Drive vulnerability remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams.
• Track remediation progress and ensure vulnerabilities are addressed within defined remediation SLAs.
• Perform remediation validation through re-scanning, technical verification, or other appropriate methods.
• Support endpoint security and vulnerability management activities using relevant security platforms.
• Maintain the vulnerability dashboards, reports, remediation status, and risk documentation.
• Provide regular updates to security and business stakeholders regarding critical findings, remediation progress, exceptions, and outstanding risks.
• Support investigation and response activities for critical or actively exploited vulnerabilities, including zero-day vulnerabilities when required.

Experience working with some of the following security technologies/tools:

• Wiz
• CrowdStrike
• Nexpose / Rapid7
• Splunk
• AppSpider
• ServiceNow

Ability to document technical security findings and define appropriate remediation/mitigation steps.

Demonstrated experience driving remediation activities across multiple technical teams.

Strong communication, stakeholder management, ownership, and follow-up skills.

Required Qualifications:

• 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or a related security domain.
• Hands-on experience in vulnerability assessment and vulnerability management.
• Strong understanding of risk assessment and risk-based vulnerability prioritization, beyond simply relying on CVSS/severity ratings.
• Ability to analyze, investigate, and validate vulnerability scan results.
• Strong knowledge of endpoint security and vulnerability remediation.
• Good understanding of Windows and Linux operating systems from a security perspective.
• Working knowledge of networking and network security fundamentals.
• Understanding basic application security and common application vulnerabilities.

Preferred Qualifications:

• Experience in Security Operations (SecOps) and/or Vulnerability Management.
• Exposure in security environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Experience with zero-day vulnerability identification, assessment, response, and remediation.
• Experience working with remediation SLAs and vulnerability tracking.
• Familiarity with security exceptions, risk acceptance, compensating controls, and risk treatment processes.
• Experience coordinating remediation across infrastructure, cloud, network, application, and DevOps teams.

Relevant security certifications such as: