Architect I

Insight; Indianapolis (IN); Hybrid; USD 42,000 - 74,000; Full time

Benefits offered by this job

Medical Insurance

Health Benefits

Shift Allowance

Learning Platform

Certificate Reimbursement

Job summary

Insight in Delhi NCR seeks a Lead Attack Surface Analyst to blend hands-on vulnerability management with day-to-day team leadership of the Attack Surface Support Analyst group. The role oversees CTEM & CPEN services, ensures SLA performance, and drives process automation and service maturity.

You will mentor analysts, escalate complex findings, coordinate with clients, and shape runbooks, detection content, and KPIs while maintaining high client satisfaction.

Qualifications

• 9–12+ years in vulnerability management or related cybersecurity disciplines.
• 1–2+ years in team lead or people-management responsibilities.
• Advanced expertise with Qualys VMDR/TruRisk or similar enterprise VM platform.

Responsibilities

• Provide daily direction and prioritize work for the Attack Surface Support Analyst team.
• Mentor analysts through coaching, reviews, and feedback with management partnership.
• Serve as primary escalation point for complex findings and client concerns.
• Monitor delivery quality and SLA adherence across the client portfolio.

Skills

Qualys VMDR/TruRisk

Team leadership

Vulnerability management

Python scripting

PowerShell

Education

Bachelor’s degree in related field

Advanced security certifications

Tools

Qualys

Job description

Location

This is a hybrid opportunity in Delhi NCR, Bangalore, Hyderabad, Gurugram area. Shifts: 7:00 PM IST- 4:00 AM IST

Insight at a Glance

14,000+ engaged teammates globally with operations in 25 countries across the globe. Received 35+ industry and partner awards in the past year $9.2 billion in revenue #20 on Fortune’s World'sBest Workplaces™ list #14 on Forbes World's Best Employers in IT – 2023 #23 on Forbes Best Employers for Women in IT- 2023 $1.4M+ total charitable contributions in 2023 by Insight globally

About the role

The Lead Attack Surface Analyst is a player-coach who blends hands-on delivery with day-to-day leadership of the Attack Surface Support Analyst team. In addition to performing a subset of analyst responsibilities — operating vulnerability management tooling, validating exposures, and overseeing agentic remediation workflows — the Lead is accountable for the quality, consistency, and continuous improvement of Insight’s CTEM & CPEN service. As the program evolves, the Lead refines roles, processes, automation, and client deliverables based on operational learnings, ensuring the service scales and matures while sustaining high client satisfaction and SLA performance.

Key Responsibilities

• Provide daily direction and work prioritization for the Attack Surface Support Analyst team, balancing workload across active engagements.
• Mentor and develop analysts through coaching, quality reviews, and performance feedback in partnership with management.
• Serve as the primary escalation point for complex findings, contested risk acceptances, and client concerns.
• Monitor delivery quality and SLA adherence across the client portfolio and report status to practice leadership.

Hands-On Attack Surface Analysis (Player Component)

• Perform analyst-level work as needed — operate Qualys and related tooling, validate high-risk exposures, and drive prioritization on the most critical or sensitive engagements.
• Govern automated and agentic workflows for validation, prioritization, and remediation dispatch, maintaining human-in-the-loop oversight and appropriate confidence thresholds.
• Partner with Managed Infrastructure Services on remediation strategy, compensating controls, and verification of closure.

Continuous Improvement & Program Refinement

• Refine and enhance the CTEM & CPEN roles runbooks, and operating procedures based on learnings as the programs evolve.
• Tune detection content and automation including prioritization logic, orchestration playbooks, and agentic decision frameworks.
• Define and track service KPIs identify efficiency and maturity opportunities, and lead their implementation.
• Standardize onboarding, reporting templates, and proof-of-execution artifacts across the client portfolio.

Client Engagement & Advisory

• Lead complex or strategic client onboardings and support onboarding of all new CTEM & CPEN clients.
• Represent the service in exposure reviews, QBRs, and escalations communicating risk posture and remediation strategy to technical and executive stakeholders.
• Collaborate with sales engineering and practice leadership on scoping, service evolution, and client expansion.

What we’re looking for

• 9-12+ years in vulnerability management, security operations, penetration testing, or related cybersecurity disciplines, including 1–2+ years of team lead, mentorship, or people-management responsibility.
• Advanced, hands-on expertise with Qualys (VMDR/TruRisk) or an equivalent enterprise VM platform, including administration and tuning.
• Demonstrated experience designing or refining vulnerability/exposure management processes, SLAs, and runbooks.
• Strong command of CTEM frameworks, risk-based prioritization (CVSS/EPSS/asset criticality), and the end-to-end remediation lifecycle.
• Experience overseeing security automation/orchestration; familiarity with agentic or AI-assisted security operations is a strong plus.
• Proven client-facing delivery experience in an MSSP/MXDR or consulting environment.
• Bachelor’s degree in a related field or equivalent experience.
• Advanced certifications such as CISSP, OSCP, GPEN, GWAPT, GIAC GEVA, or Qualys VMDR Specialist.
• Experience with continuous/automated penetration testing platforms (NodeZero, Pentera, Cymulate) and adversary emulation.
• Scripting and automation proficiency (Python, PowerShell, KQL) and ServiceNow workflow design.
• Familiarity with NIST CSF, CIS Controls v8, and regulated-industry compliance (HIPAA/HITECH, PCI DSS, CMMC).
• Prior experience standing up or maturing a managed security service offering.

What you can expect

We’re legendary for taking care of you, your family and to help you engage with your local community. We want you to enjoy a full, meaningful life and own your career at Insight.

• Freedom to work from another location—even an international destination—for up to 30 consecutive calendar days per year.
• Medical Insurance
• Health Benefits
• Professional Development: Learning Platform and Certificate Reimbursement
• Shift Allowance

But what really sets us apart are our core values of Hunger, Heart, and Harmony, which guide everything we do, from building relationships with teammates, partners, and clients to making a positive impact in our communities.

Equal Opportunity Statement

At Insight, we celebrate diversity of skills and experience so even if you don’t feel like your skills are a perfect match - we still want to hear from you!