Role & responsibilities
Perform vulnerability assessment reviews using Qualys, Nessus, or equivalent vulnerability management platforms.
Analyze vulnerability scan results and validate findings to identify true risk and remediation priorities.
Coordinate with infrastructure, application, cloud, and endpoint teams to drive remediation within defined SLAs.
Track remediation progress and follow up with asset owners until vulnerabilities are resolved.
Review vulnerabilities using CVSS scoring, exploitability, business criticality, and threat intelligence to support risk-based prioritization.
Monitor patch compliance and remediation effectiveness across Windows, Linux, network, and cloud assets.
Prepare operational dashboards, reports, and executive summaries for management.
Maintain accurate documentation of vulnerability findings, remediation activities, exceptions, and risk acceptances.
Support onboarding, testing, and operationalization of new vulnerability management and security tools.
Identify prospects to improve processes, workflows, reporting, and automation.
Work independently to organize daily team activities and help improve operational efficiency.
Collaborate with Security Operations, Incident Response, Cloud Security, Infrastructure,



and Application teams on vulnerability-related investigations.
Participate in vulnerability review meetings and communicate technical findings to both technical and non-technical stakeholders.

Preferred candidate profile
2 to3 years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
Positive understanding of vulnerabilities, CVEs, CVSS scoring, and risk prioritization.
Hands-on experience with vulnerability scanning tools such as:
Qualys
Nessus
Tenable
Good understanding of
Windows Server
Linux
Networking fundamentals
Servers and endpoints
Understanding of patch management lifecycle and remediation tracking.
Knowledge of IT infrastructure and asset management.
Good understanding of OWASP Top 10, including:
SQL Injection
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Broken Access Control
Authentication & Authorization issues
Security Misconfiguration
Vulnerable Components
Server-Side Request Forgery (SSRF)
Experience working with ServiceNow or similar ticketing platforms.
Valuable analytical and troubleshooting skills.
Ability to work independently with minimal supervision

📌 Vulnerability Management Analyst Hyderabad
🏢 Achieve Cybersecurity Solutions
📍 Hyderabad