Role & responsibilities

- Perform vulnerability assessment reviews using Qualys, Nessus, or equivalent vulnerability management platforms.
- Analyze vulnerability scan results and validate findings to identify true risk and remediation priorities.
- Coordinate with infrastructure, application, cloud, and endpoint teams to drive remediation within defined SLAs.
- Track remediation progress and follow up with asset owners until vulnerabilities are resolved.
- Review vulnerabilities using CVSS scoring, exploitability, business criticality, and threat intelligence to support risk-based prioritization.
- Monitor patch compliance and remediation effectiveness across Windows, Linux, network, and cloud assets.
- Prepare operational dashboards, reports, and executive summaries for management.
- Maintain accurate documentation of vulnerability findings, remediation activities, exceptions, and risk acceptances.
- Support onboarding, testing, and operationalization of new vulnerability management and security tools.
- Identify opportunities to improve processes, workflows, reporting, and automation.
- Work independently to organize daily team activities and help improve operational efficiency.
- Collaborate with Security Operations, Incident Response, Cloud Security, Infrastructure,



and Application teams on vulnerability-related investigations.
- Participate in vulnerability review meetings and communicate technical findings to both technical and non-technical stakeholders.

Preferred candidate profile

- 2 to3 years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
- Good understanding of vulnerabilities, CVEs, CVSS scoring, and risk prioritization.
- Hands-on experience with vulnerability scanning tools such as:

- Qualys

- Nessus

- Tenable

- Good understanding of

- Windows Server

- Linux

- Networking fundamentals

- Servers and endpoints
- Understanding of patch management lifecycle and remediation tracking.
- Knowledge of IT infrastructure and asset management.
- Good understanding of OWASP Top 10, including:

- SQL Injection
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)

- Broken Access Control
- Authentication & Authorization issues

- Security Misconfiguration

- Vulnerable Components
- Server-Side Request Forgery (SSRF)
- Experience working with ServiceNow or similar ticketing platforms.
- Valuable analytical and troubleshooting skills.
- Ability to work independently with minimal supervision

📌 Vulnerability Management Analyst (Hyderabad)
🏢 Achieve Cybersecurity Solutions
📍 Hyderabad