Vulnerability Management Analyst

Achieve Cybersecurity Solutions; Hyderabad; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Achieve Cybersecurity Solutions is seeking a Vulnerability Management professional in Hyderabad to assess and prioritize risks from vulnerabilities across on-premises and cloud assets. You will coordinate remediation across multiple teams and track progress to closure.

The role requires hands-on scanning experience (Qualys/Nessus/Tenable), knowledge of patch lifecycles, and strong analytical skills to communicate findings to both technical and non-technical stakeholders.

Qualifications

• 2–3 years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
• Good understanding of vulnerabilities, CVEs, CVSS scoring, and risk prioritization.
• Hands-on experience with vulnerability scanning tools: Qualys, Nessus, Tenable.
• Good understanding of Windows Server, Linux, Networking fundamentals, servers and endpoints.
• Understanding of patch management lifecycle and remediation tracking.
• Knowledge of IT infrastructure and asset management.
• Good understanding of OWASP Top 10 (SQLi, XSS, CSRF, Broken Access Control, auth issues, misconfig, vulnerable components, SSRF).
• Experience with ServiceNow or similar ticketing platforms.
• Analytical and troubleshooting skills; able to work independently with minimal supervision.

Responsibilities

• Perform vulnerability assessment reviews using Qualys, Nessus, or equivalent platforms.
• Analyze vulnerability scan results and validate findings to identify true risk and remediation priorities.
• Coordinate with infrastructure, application, cloud, and endpoint teams to drive remediation within defined SLAs.
• Track remediation progress and follow up with asset owners until vulnerabilities are resolved.
• Review vulnerabilities using CVSS scoring, exploitability, business criticality, and threat intelligence for prioritization.
• Monitor patch compliance and remediation effectiveness across Windows, Linux, network, and cloud assets.
• Prepare operational dashboards, reports, and executive summaries for management.
• Maintain accurate documentation of vulnerability findings, remediation activities, exceptions, and risk acceptances.
• Support onboarding, testing, and operationalization of new vulnerability management and security tools.
• Identify opportunities to improve processes, workflows, reporting, and automation.
• Work independently to organize daily team activities and improve operational efficiency.
• Collaborate with Security Operations, Incident Response, Cloud Security, Infrastructure, and Application teams on vulnerability investigations.
• Participate in vulnerability review meetings and communicate findings to technical and non-technical stakeholders.

Skills

Vulnerability management

Security operations

Risk prioritization

Independent work

Analytical skills

Troubleshooting

Tools

Qualys

Nessus

Tenable

ServiceNow

Job description

Role & responsibilities

• Perform vulnerability assessment reviews using Qualys, Nessus, or equivalent vulnerability management platforms.
• Analyze vulnerability scan results and validate findings to identify true risk and remediation priorities.
• Coordinate with infrastructure, application, cloud, and endpoint teams to drive remediation within defined SLAs.
• Track remediation progress and follow up with asset owners until vulnerabilities are resolved.
• Review vulnerabilities using CVSS scoring, exploitability, business criticality, and threat intelligence to support risk-based prioritization.
• Monitor patch compliance and remediation effectiveness across Windows, Linux, network, and cloud assets.
• Prepare operational dashboards, reports, and executive summaries for management.
• Maintain accurate documentation of vulnerability findings, remediation activities, exceptions, and risk acceptances.
• Support onboarding, testing, and operationalization of new vulnerability management and security tools.
• Identify opportunities to improve processes, workflows, reporting, and automation.
• Work independently to organize daily team activities and help improve operational efficiency.
• Collaborate with Security Operations, Incident Response, Cloud Security, Infrastructure, and Application teams on vulnerability-related investigations.
• Participate in vulnerability review meetings and communicate technical findings to both technical and non-technical stakeholders.

Preferred candidate profile

• 2 to3 years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
• Good understanding of vulnerabilities, CVEs, CVSS scoring, and risk prioritization.
• Hands-on experience with vulnerability scanning tools such as:
  • Qualys
  • Nessus
  • Tenable
• Good understanding of:
  • Windows Server
  • Linux
  • Networking fundamentals
  • Servers and endpoints
• Understanding of patch management lifecycle and remediation tracking.
• Knowledge of IT infrastructure and asset management.
• Good understanding of OWASP Top 10, including:
  • SQL Injection
  • Cross-Site Scripting (XSS)
  • Cross-Site Request Forgery (CSRF)
  • Broken Access Control
  • Authentication & Authorization issues
  • Security Misconfiguration
  • Vulnerable Components
  • Server-Side Request Forgery (SSRF)
• Experience working with ServiceNow or similar ticketing platforms.
• Good analytical and troubleshooting skills.
• Ability to work independently with minimal supervision