Vulnerability Analyst

Capgemini; Chennai District; Hybrid; INR 1,800,000 - 2,800,000; Full time

Job summary

Capgemini India, based in Chennai, seeks a security specialist to lead vulnerability management initiatives across in-scope technology stacks. You will drive remediation planning, patch prioritization, and risk reduction while aligning with compliance frameworks.

Responsibilities include coordinating with Cyber Security teams, analyzing vulnerability reports, and supporting remediation for all severity levels, ensuring SLAs and regulatory requirements are met, with emphasis on automation

Qualifications

• Experience in vulnerability management and remediation lifecycle.
• Ability to analyze CVSS scores and drive risk-based prioritization.
• Familiarity with security compliance frameworks and regulatory requirements.

Responsibilities

• Coordinate with Cyber Security teams to identify and prioritize security vulnerabilities.
• Analyze vulnerability reports and patch requirements.
• Support remediation planning for critical, high, medium, and low vulnerabilities.
• Ensure compliance with patching SLAs and regulatory requirements.
• Guide emergency and zero-day vulnerability response activities.
• Track remediation exceptions, risk acceptances, and compliance status.
• Recommend security improvements and automation opportunities.

Skills

Vulnerability management

CVSS and risk analysis

Security compliance frameworks

Security operations

Governance

Tools

Qualys

Tenable

Rapid7

Job description

JD:

Required Skills

• Vulnerability Management
• CVSS and Risk Analysis
• Security Compliance Frameworks
• Qualys, Tenable, Rapid7 or equivalent
• Security Operations and Governance

Provide technical leadership for vulnerability remediation planning, patch prioritization, risk reduction, and security compliance across all in-scope technologies.

Key Responsibilities

• Coordinate with Cyber Security teams to identify and prioritize security vulnerabilities.
• Analyze vulnerability reports and patch requirements.
• Support remediation planning for critical, high, medium, and low vulnerabilities.
• Ensure compliance with patching SLAs and regulatory requirements.
• Guide emergency and zero-day vulnerability response activities.
• Track remediation exceptions, risk acceptances, and compliance status.
• Recommend security improvements and automation opportunities.