Key Responsibilities

- Analyze and prioritize vulnerabilities, security findings, and exposure data received from multiple security platforms, assessment activities, and security teams.

- Apply threat-informed prioritization using active exploitation, known threat activity, exploit availability, asset criticality, business impact, and compensating controls.

- Correlate vulnerability and exposure data with threat intelligence, including Known Exploited Vulnerabilities, emerging campaigns, ransomware activity, and relevant adversary behavior.

- Translate security findings into clear, actionable remediation recommendations and coordinate with asset, application, infrastructure, cloud, and service owners to drive resolution.

- Track remediation progress through closure, validate corrective actions, identify overdue or stalled items, and escalate material risk when required.

- Review findings reported by vulnerability scanners, external attack surface platforms, penetration tests, cloud security tools, audits, assessments, and other security programs.

- Support rapid prioritization and coordinated response for critical vulnerabilities, zero-day threats, and exposures associated with active or credible exploitation.

- Develop operational and executive reporting on exposure trends, remediation performance, risk reduction, service-level adherence, and program effectiveness.

- Produce metrics, dashboards, scorecards, and recurring analyses that enable risk-based decision-making and improve accountability for remediation.

- Collaborate with Security Operations, Threat Intelligence, Infrastructure, Cloud, Engineering, Manufacturing, application teams, and business stakeholders to reduce enterprise exposure.

- Identify recurring weaknesses, emerging exposure trends, and opportunities to improve controls, processes, data quality, ownership, or remediation efficiency.

- Occasionally investigate exposure data for findings of interest and support vulnerability exceptions, risk acceptance,



and compensating-control reviews.

Required Qualifications

- Five or more years of experience in cybersecurity, vulnerability management, exposure management, security operations, threat intelligence, or a related discipline.

- Strong knowledge of vulnerability management practices, remediation workflows, vulnerability scoring, exploitability analysis, and risk-based prioritization.

- Demonstrated ability to assess technical findings using threat context, asset importance, business impact, and the likelihood of exploitation.

- Working knowledge of common vulnerability and exposure concepts, including CVE, CVSS, CISA KEV, exploit availability, attack paths, misconfigurations, and external exposure.

- Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, or manufacturing technology teams.

- Experience developing security metrics, dashboards, management reporting, and concise risk communications for technical and leadership audiences.

- Strong analytical, problem-solving, organizational, and stakeholder-management skills.

- Excellent written and verbal communication skills, with the ability to translate complex technical risk into clear business language.

Preferred Qualifications

- Experience with platforms such as CrowdStrike Exposure Management or Falcon Spotlight, Rapid7, ServiceNow Vulnerability Response, Cortex Xpanse, or comparable technologies.

- Experience applying cyber threat intelligence to vulnerability and exposure prioritization workflows.

- Familiarity with external attack surface management, cloud security, identity exposure, application security, or attack-path analysis.

- Experience working with large vulnerability datasets and improving data quality, asset ownership, deduplication, or system-of-record accuracy.

- Experience using Python, APIs, Power BI, SQL, Databricks, or automation platforms to streamline analysis, reporting, and workflow integration.

- Experience supporting a large, global, regulated, manufacturing, or technology-focused enterprise workplace.

📌 Continuous Threat Exposure Management (CTEM) (Bengaluru)
🏢 Tata Consultancy Services
📍 Bengaluru