Mission
The VOC Triage Analyst will be part of a team responsible for vulnerability review and recategorization, false positive identification, proactive vulnerability testing, and providing comprehensive feedback and guidance on detected vulnerabilities. This role includes offering a holistic approach to fixing system vulnerabilities, as well as aiding the offensive security team in planning and executing pentests, and coordinating logistics for pentesting activities.
The VOC Triage Analyst is responsible for:
- Vulnerability Management:
oVulnerability review, recategorization, and false positive identification
oProactive vulnerability testing and replay
oPre-analyze and consolidate vulnerability data from various scanning tools (Qualys VMDR, Qualys WAS, Patrowl, etc.)
oPrepare concise syntheses of available vulnerabilities
oOffer guidance to the SO and CISO on vulnerabilities
oCollaborate with key stakeholders to develop strategies for vulnerability management
oParticipate in developing and implementing holistic approaches to fix bundles of system vulnerabilities through Group Policy Objects (GPOs) and distributed packages
- Automate testing actions:
oDevelop, test, and maintain automated scripts to review and validate vulnerabilities from various scanning tools (e.g., Qualys VMDR, Qualys WAS, Patrowl, …).
oBuild automation workflows to streamline vulnerability identification, triage, and reporting
oAutomate the process of replaying vulnerabilities and testing environments for potential issues
oCollaborate with the offensive and defensive teams to enhance vulnerability testing
oContinuously optimize and update automated scripts based on new vulnerability types and findings
- Pentest Support:
oAssist the offensive team in planning and preparing for Pentests, including account and role preparation, and setting identification
oGathering prerequisites to speed up Pentest delivery by the OSO team
oCoordinate logistics for Pentesting, including kick-off and fina
📌 Engineer - Cybersecurity (Mumbai)
🏢 Indec
📍 Mumbai