Job Summary
We are seeking an experienced Vulnerability Management Analyst. The role will focus on validating, triaging, and assessing security vulnerabilities identified through automated scanning tools and AI-assisted security analysis. The candidate will be responsible for performing technical, business, and exploit validation activities to distinguish true positives from false positives and provide actionable remediation recommendations
Key Responsibilities
Technical Validation

- Analyze vulnerability findings from SAST, DAST, SCA, penetration testing, and AI-assisted security tools.
- Validate the existence of vulnerable code and confirm vulnerability accuracy.
- Verify whether the vulnerable execution path is reachable and exploitable.
- Assess if required conditions for exploitation can realistically occur.
- Review input validation and sanitization controls to determine their effectiveness.
- Evaluate existing security controls and compensating controls to determine whether they mitigate the identified risk.
- Collaborate with development teams to perform secure code reviews and root cause analysis

Business Validation

- Verify whether the vulnerable component is deployed in active environments.
- Assess whether the affected application, feature, or functionality is actively used by the business.
- Analyze business impact and determine effects on confidentiality, integrity, and availability (CIA).
- Prioritize findings based on exploitability, business criticality, and potential risk exposure.
- Engage with application owners,



architects, and security teams to understand business context and validate risk ratings

Exploit Validation

- Reproduce vulnerabilities in a controlled non-production workplace.
- Develop and execute proof-of-concept (PoC) scenarios to demonstrate exploitability.
- Verify that reported vulnerable locations accurately map to the affected source code or infrastructure component.
- Validate exploit conditions, attack paths, and potential business impact.
- Document exploitation evidence and support remediation verification activities.

Governance & Reporting

- Distinguish true positives, false positives, duplicates, and non-exploitable findings.
- Prepare validation reports with evidence, risk ratings, and remediation recommendations.
- Support vulnerability lifecycle management from detection through closure.
- Track remediation progress and validate fixes through rescanning and retesting.
- Contribute to security metrics, dashboards, and compliance reporting.
- Collaborate with AppSec, DevSecOps, Development, Infrastructure, and Security Architecture teams

Required Skills & Experience
Technical Skills

- experience in Vulnerability Management, Application Security, Penetration Testing, or Security Engineering.
- Strong understanding of:
- OWASP Top 10
- Secure SDLC
- Threat Modeling
- Application Security Testing
- Vulnerability Assessment & Management
- Hands-on experience performing vulnerability validation and exploitability assessments.

📌 - Senior Analyst (Bengaluru)
🏢 TRIGENT SOFTWARE PRIVATE
📍 Bengaluru