Looking for a Senior Security Analyst with 8-10 years of experience to lead our Vulnerability Management operations. The ideal candidate will be responsible for the continuous scanning, identification, and analysis of vulnerabilities across server infrastructure and end-user computing (laptops/desktops). This role requires a strong communicator who can interface directly with clients to drive remediation efforts, explain risk impact, and ensure the security posture of the organization is maintained using industry-standard tools like Tenable Nessus and Qualys. /n Key Responsibilities: /n Vulnerability Assessment: Conduct scheduled and ad-hoc vulnerability scans on Server farms (Windows/Linux) and Laptops/Endpoints using Tenable Nessus and Qualys. /n Analysis & Prioritization: Analyze scan results to identify false positives and prioritize vulnerabilities based on CVSS scores, threat intelligence, and business criticality. /n Client Coordination: Act as the primary point of contact for clients/system owners.

Explain the technical "how-to" of fixing vulnerabilities and negotiate downtime for patching windows. /n Remediation Management: Track the lifecycle of open vulnerabilities from discovery to closure.



Collaborate with IT and Patch Management teams to ensure SLAs are met. /n Reporting: Prepare detailed technical reports for engineering teams and high-level executive dashboards for client management, highlighting risk trends and remediation progress. /n Configuration Review: Perform configuration compliance scanning (CIS Benchmarks) for servers and laptops to ensure hardening standards are met /n Required Skills/Technologies/Tools /n Core Tools: Deep expertise in Tenable Nessus (Tenable.sc / Tenable.io) and Qualys VM. /n Operating Systems: Solid administration knowledge of Windows Server (Active Directory, Registry, Group Policy) and Linux (RHEL/Ubuntu/CentOS) to understand patch application. /n Validation Tools: Familiarity with Nmap, Burp Suite (for basic web validation), and Metasploit (for verifying exploitability). /n Scripting: Basic proficiency in Python, Bash, or PowerShell to automate scan data processing or reporting. /n Soft Skills: Excellent verbal communication for client stakeholder management. /n Good to have Technologies/Tools /n Cloud Security: Experience with AWS or Azure native security tools (Inspector, Defender for Cloud).

📌 VAPT Lead (Thoothukudi)
🏢 SQ1 Security
📍 Thoothukudi