Vulnerability & Patch Management Analyst

Tata Consultancy Services; New Castle (DE); On-site; USD 100,000 - 110,000; Full time

Job summary

Tata Consultancy Services is seeking an Information Security Analyst to support enterprise security operations with a focus on vulnerability management, patching, and risk remediation. You will collaborate with engineering and infrastructure teams to identify, analyze, and mitigate security risks while driving automation and metric-driven reporting.

The role emphasizes risk-based prioritization, incident support, and continuous improvement of remediation workflows, with strong emphasis on

Qualifications

• 4-10 years of experience in Information Security, Cybersecurity, or IT Risk Management.
• Hands-on experience with vulnerability management tools (e.g., Qualys, Tenable, Rapid7).
• Strong understanding of patch management processes across Windows, Linux, and application environments.
• Experience performing root cause analysis and implementing corrective actions.
• Strong analytical, problem-solving, and documentation skills.

Responsibilities

• Manage the vulnerability remediation lifecycle, ensuring timely patching and mitigation across servers, applications, databases, and endpoints.
• Analyze vulnerability scan results, prioritize remediation based on risk, and track fixes through closure.
• Collaborate on patch deployments, addressing failures, system dependencies, and post-deployment validation.
• Partner with engineering, infrastructure, and application teams to identify and mitigate security risks.
• Conduct root cause analysis (RCA) for security incidents and recurring vulnerabilities, driving permanent fixes.
• Assist in security incident response activities and remediation recommendations as needed.
• Identify opportunities to automate repetitive security and operational processes, improving efficiency and consistency.
• Support continuous improvement of remediation workflows, escalation processes, and SLAs.
• Maintain vulnerability metrics, dashboards, and reports to track remediation status, aging vulnerabilities, and compliance.
• Provide regular status updates to security leadership and technology stakeholders.
• Support audit, risk, and compliance activities related to vulnerability management.
• Act as a liaison between security and technology teams to ensure smooth remediation execution.
• Clearly communicate technical risks, remediation plans, and timelines to diverse stakeholders.

Skills

Information Security

Vulnerability Management

Analytical Thinking

Documentation

Tools

Qualys

Tenable

Rapid7

Job description

Tata Consultancy Services is seeking an Information Security Analyst to support enterprise security operations with a focus on vulnerability management, patching, and risk remediation. You will collaborate with engineering and infrastructure teams to identify, analyze, and mitigate security risks while driving automation and metric-driven reporting.

The role emphasizes risk-based prioritization, incident support, and continuous improvement of remediation workflows, with strong emphasis on