Vulnerability Management Analyst

Talent'd HR Solutions; Bengaluru; Hybrid; INR 800,000 - 1,200,000; Full time

Job summary

A leading aerospace company is looking for a cybersecurity professional to join their team in Bangalore. The role involves performing risk analysis, managing vulnerabilities, and supporting security initiatives in a hybrid environment. Candidates should have a master's degree in Information Technology or Industrial Management, with proficiency in Python, SQL, and experience in cybersecurity. This position promotes diversity and encourages applications from varied backgrounds.

Qualifications

• Master’s degree or equivalent in Information Technology or Industrial Management required.
• Proficiency in Python or R for data modeling and SQL for querying security telemetry is essential.
• Experience or knowledge in cybersecurity, vulnerability management, or quantitative risk analysis expected.

Responsibilities

• Perform quantitative risk modeling using Monte Carlo simulations.
• Track and manage vulnerabilities within a centralized platform.
• Conduct multi-dimensional analysis to prioritize vulnerabilities.
• Improve vulnerability management processes to reduce MTTR.
• Support the Security Governance department with remediation follow-ups.
• Analyze relationships between vulnerability metrics and business impact.

Skills

Cybersecurity

Risk Analysis

Analytical Skills

Python

SQL

Vulnerability Management

Education

Master’s degree in Information Technology or Industrial Management

Tools

Monte Carlo Simulation

AI Prompt Engineering

Cloud Platforms (AWS, Azure, GCP)

Job description

The Volunteer for International Experience (VIE) program is an international initiative sponsored by French ministries including the Ministry of Europe and Foreign Affairs and the Ministry of Economy and Finance. It enables young professionals to gain paid work experience abroad in technical or business roles.

This opportunity is offered by Airbus for early career professionals seeking international exposure. The VIE contract is governed by Business France eligibility rules and typically runs for a duration of 6 to 24 months.

About the Role

This position is based in Bangalore and is part of the Airbus Corporate Security organization for the India and South Asia region. The role reports to the Regional Chief Information Security Officer (CISO).

You will work with cybersecurity, IT and industry professionals across India and South Asia. The role requires collaboration with multiple stakeholders while supporting security initiatives in a hybrid work environment.

About the Region

The India and South Asia region includes India, Bangladesh, Nepal, Bhutan, Sri Lanka and the Maldives. Airbus offices are located in Bangalore and New Delhi, supporting engineering, information management, customer services and functions such as HR, finance, procurement and security.

Key Responsibilities

• Perform quantitative risk modeling using Monte Carlo simulations to calculate Annual Loss Expectancy (ALE) and apply Bayesian inference to update risk probabilities.
• Track and manage vulnerabilities within a centralized platform, aligning them with the corporate security risk register across divisions.
• Conduct multi dimensional analysis to prioritize vulnerabilities using threat intelligence, vulnerability intelligence and incident response data.
• Improve vulnerability management processes to reduce Mean Time to Remediate (MTTR).
• Support the Security Governance department with remediation follow ups and monitor organizational risk posture.
• Escalate major security risks that exceed the company risk tolerance.
• Analyze relationships between vulnerability metrics and business impact using linear regression techniques.
• Use AI prompt engineering with Python and SQL to automate KPI and KRI generation and interpret statistical outputs for executive reporting.

Required Profile

A Master’s degree or equivalent in Information Technology or Industrial Management is required. Candidates should demonstrate interest in cybersecurity and risk analysis along with strong analytical capability.

Experience or knowledge in cybersecurity, vulnerability management or quantitative risk analysis is expected. Proficiency in Python or R for data modeling and SQL for querying security telemetry is required.

Understanding of probability distributions such as Lognormal, Poisson and Beta, as well as statistical significance measures like p values and R squared is beneficial. Familiarity with vulnerability prioritization frameworks such as CVSS and EPSS is also important.

Nice to Have

• Knowledge of FAIR (Factor Analysis of Information Risk) framework.
• Experience managing security controls in cloud platforms such as AWS, Azure or GCP.
• Professional certifications such as CRISC, CISM or CISSP.

Airbus promotes diversity and equal opportunities and encourages applications from candidates with varied backgrounds. If you meet most of the required skills and are motivated to develop further, you are encouraged to apply.