Details:

Stefanini Group is looking for a Cyber Security Vulnerability Analyst to complement the technical capabilities of our Security Operations Center (SOC), part of Infrastructure Services (INFRA) Division.

Job responsibility :
• Serve as a technical escalation point for client vulnerability management-related issues.
• Perform vulnerability assessment scanning, false positive validation, compliance scanning, and policy configuration using various vulnerability management tools.
• Review security vulnerabilities across multiple technologies and environments to identify high-risk issues affecting business assets.
• Conduct risk, threat, and vulnerability analysis, including understanding exploitation techniques and attack paths.
• Provide transparent remediation guidance and assist clients in prioritizing vulnerabilities based on risk and impact.
• Support patch management and remediation tracking activities.
• Integrate, analyze, and communicate vulnerability metrics, trends, and risk posture to clients and internal management.
• Ensure vulnerability management activities comply with defined SLAs, processes, and client requirements.




• Contribute to continuous improvement of vulnerability management processes and reporting.
• Participate in mentoring junior analysts and knowledge-sharing activities.
Details:

* 4+ years of experience in vulnerability management, threat management, or related security operations roles.
* Advanced hands-on experience with vulnerability management platforms (e.g., Microsoft Defender VA, Qualys, Nessus, Rapid7).
* Deep understanding of vulnerability classification, scoring methodologies, and risk-based prioritization.
* Strong knowledge of enterprise IT environments, networks, operating systems, and security controls.
* Experience supporting audits, compliance initiatives, and executive-level reporting.
* Ability to translate technical vulnerability data into business risk insights.
* Strong leadership, mentoring, and stakeholder management skills.
* Excellent written and verbal communication skills in English.
* Relevant advanced certifications (e.g., CISSP, CISM, CEH, OSCP, vendor expert-level certifications) are a strong plus.
* High level of autonomy, accountability, and professionalism.

📌 IT Security Analyst II (Hyderabad)
🏢 Stefanini Group
📍 Hyderabad