Cyber Security Analyst

Job Title: Vulnerability Management:

Job Description:

• Maintaining the vulnerability management systems of the organization, ensuring all assets are appropriately covered.
• Track emerging vulnerabilities, map their relevance to the organization’s infrastructure, report and ensure mitigation in a timely manner.
• Analyze scan reports to determine applicability of the findings and evaluate appropriateness of the assigned severity.
• Prioritize the identified vulnerabilities and guide asset owners for their remediation.
• Ensure that the identified vulnerabilities are remediated or mitigated within the approved timeframe.
• Run revalidations to ensure resolved vulnerabilities are reflected onto the vulnerability management platform.
• Ensure compliance of IT infrastructure against the defined benchmarks and secure implementation guidelines.
• Proactively drive the patching of all critical vulnerabilities throughout the impacted asset base.
• Lead meetings with asset owners to guide and explain the findings and the required mitigation.
• Conduct configuration reviews for OS, Firewall, routers/switches, and other security devices/components.
• Troubleshoot issues that hinder the successful completion of vulnerability scans.
• Prepare periodic statistical reports for the consumption of remediating, cybersecurity, and governance teams.
• Prepare live dashboards for the consumption of the remediation and the cybersecurity teams.
• Be the lead contributor to the automation of the vulnerability management cycle; including scripting of repetitive tasks and implementation of API integrations.
• Drive the evolution of the vulnerability management program ensuring adequate coverage of entire digital footprint of the organization.
• Assist team in the preparation of the documentation/proposals around security solutions/offerings.
• Assist team in the development and maintenance of security control guidelines specific for the organization.
• Assist team by contributing to the delivery of security awareness programs.

• Position Criteria:
• Good networking fundamentals and understanding of large enterprise architectures and operations.
• Knowledge of Network Security technology in areas of Firewall, IPS, VPN, Gateway security solutions (proxy, web filtering).
• Experience with enterprise grade vulnerability management solutions
• Good understanding of virtualized and public cloud infrastructure
• Strong documentation and communication skills.
• Hands-on experience with Windows and Linux systems would be a plus.

• Skills:
• Experience with the implementation of vulnerability management frameworks.
• Experienced with atleast one enterprise grade vulnerability management solution.
• hands-on experience on Windows and Linux servers and working knowledge of Enterprise infrastructure.