Vulnerability Security Operations Analyst

Xerox Corporation; India; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Xerox Corporation in India is seeking a seasoned Vulnerability Management Analyst to identify, assess and report security vulnerabilities across the tech stack. You will collaborate with IT and Engineering to remediate findings and strengthen defense-in-depth.

The role requires strong communication, an IT security background, and hands-on experience with vulnerability scanning tools. Prior malware and threat intel exposure is a plus, with a focus on structured problem solving.

Qualifications

• Excellent communication skills, both written and verbal.
• Detail-oriented and able to manage multiple tasks effectively.
• Ability to work independently and as part of a team.
• Strong organizational skills and the ability to prioritize tasks effectively.
• Capable of rationalizing systemically to identify patterns and solve problems in a structured way.
• Strong IT background and knowledge of IT business systems.
• Familiarity with security standards, frameworks, and compliance requirements.
• Demonstrated experience in vulnerability management, cybersecurity, or related roles.
• Proficiency with vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS, Tenable) and experience with vulnerability assessment methodologies.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., defense-in-depth).
• Understanding of how traffic flows across the network (e.g., TCP/IP, OSI, ITIL).
• Knowledge of system and application security threats and vulnerabilities.
• Knowledge of penetration testing principles, tools, and techniques.

Responsibilities

• Analyze scan results to prioritize and categorize risks and vulnerabilities based on severity and impact.
• Collaborate with system owners to prioritize remediation and track progress.
• Stay informed about emerging threats and best practices in vulnerability management.
• Perform technical evaluations of vulnerabilities to validate findings and remediations.

Skills

Communication skills

Detail-oriented

Independent work

Organizational skills

Problem solving

IT background

Security knowledge

Vulnerability management

Nessus

Qualys

OpenVAS

Tenable

Network security concepts

Penetration testing basics

Education

Bachelor’s degree in relevant field

Tools

Nessus

Qualys

OpenVAS

Tenable

Job description

About Xerox Holdings Corporation
For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power the hybrid workplace of today and tomorrow. Today, Xerox is continuing its legacy of innovation to deliver client-centric and digitally-driven technology solutions and meet the needs of today’s global, distributed workforce. From the office to industrial environments, our differentiated business and technology offerings and financial services are essential workplace technology solutions that drive success for our clients. At Xerox, we make work, work.Learn more about us at www.xerox.com .

JOB TITLE

Vulnerability Management Analyst (Cybersecurity)

JOB DESCRIPTION

We are seeking a dedicated and skilled Vulnerability Management Analyst to join the cybersecurity team. This role plays a key part in identifying, assessing, and reporting on security vulnerabilities across the organization's technology infrastructure and working with our partners in IT and Engineering to remediate them. The position is critical to maintaining the security and integrity of systems and data.

WHAT YOU WILL BE DOING

• Analyze scan results to prioritize and categorize risks and vulnerabilities based on their severity and potential impact.
• Collaborate with system owners and support teams to prioritize and facilitate the remediation of identified vulnerabilities, tracking progress and ensuring timely resolution.
• Stay informed about emerging security threats, risks and vulnerabilities, as well as industry best practices for vulnerability management.
• Perform technical evaluations of vulnerabilities to validate findings and determine potential remediation paths and mitigations.

MUST-HAVE QUALIFICATIONS, SKILLS, EXPERIENCE

• Excellent communication skills, both written and verbal.
• Detail-oriented and able to manage multiple tasks effectively.
• Ability to work independently and as part of a team.
• Strong organizational skills and the ability to prioritize tasks effectively.
• Capable of rationalizing systemically to identify patterns and solve problems in a structured way.
• Strong IT background and knowledge of IT business systems.
• Familiarity with security standards, frameworks, and compliance requirements.
• Demonstrated experience in vulnerability management, cybersecurity, or related roles.
• Proficiency with vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS, Tenable) and experience with vulnerability assessment methodologies.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Understanding of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology. Infrastructure Library, current version [ITIL]).
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
• Knowledge of penetration testing principles, tools, and techniques.

Certifications (preferred but not required):

• Relevant certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH), are a plus.

EDUCATIONAL QUALIFICATIONS

• Bachelor’s degree in business, information technology, Computer Science, Engineering, Cybersecurity, or related field

YEARS OF EXPERIENCE IN THIS FIELD

• 7+ years of Information Technology experience
• 5+ years experience in vulnerability management and/or offensive security