Requisition Number :105821**

Architect 1 (Cyber Exposure)

Location :This is a hybrid opportunity in Delhi NCR, Bangalore, Hyderabad, Gurugram area. Shifts : 7:00 PM IST- 4:00 AM IST - Insight at a Glance**

- 14,000+ engaged teammates globally with operations in 25 countries across the globe.
- Received 35+ industry and partner awards in the past year
- $9.2 billion in revenue
- 20 on Fortune’s World's Best Workplaces list
- 14 on Forbes World's Best Employers in IT - 2023
- 23 on Forbes Best Employers for Women in IT- 2023
- $1.4M+ total charitable contributions in 2023 by Insight globally

Now is the time to bring your expertise to Insight. We are not just a tech company; we are a people-first company. We believe that by unlocking the power of people and technology, we can accelerate transformation and achieve extraordinary results. As a Fortune 500 Solutions Integrator with deep expertise in cloud, data, AI, cybersecurity, and intelligent edge, we guide organisations through complex digital decisions. - About the role

The Lead Attack Surface Analyst is a player-coach who blends hands-on delivery with day-to-day leadership of the Attack Surface Support Analyst team. In addition to performing a subset of analyst responsibilities — operating vulnerability management tooling, validating exposures, and overseeing agentic remediation workflows — the Lead is accountable for the quality, consistency, and continuous improvement of Insight’s CTEM & CPEN service. As the program evolves, the Lead refines roles, processes, automation, and client deliverables based on operational learnings, ensuring the service scales and matures while sustaining high client satisfaction and SLA performance.

Key Responsibilities:

- Team Leadership & Daily Management




- Provide daily direction and work prioritization for the Attack Surface Support Analyst team, balancing workload across active engagements.
- Mentor and develop analysts through coaching, quality reviews, and performance feedback in partnership with management.
- Serve as the primary escalation point for complex findings, contested risk acceptances, and client concerns.
- Monitor delivery quality and SLA adherence across the client portfolio and report status to practice leadership.
- Hands-On Attack Surface Analysis (Player Component)
- Perform analyst-level work as needed — operate Qualys and related tooling, validate high-risk exposures, and drive prioritization on the most critical or sensitive engagements.
- Govern automated and agentic workflows for validation, prioritization, and remediation dispatch, maintaining human-in-the-loop oversight and appropriate confidence thresholds.
- Partner with Managed Infrastructure Services on remediation strategy, compensating controls, and verification of closure.
- Continuous Improvement & Program Refinement
- Refine and enhance the CTEM & CPEN roles runbooks, and operating procedures based on learnings as the programs evolve.
- Tune detection content and automation including prioritization logic, orchestration playbooks, and agentic decision frameworks.
- Define and track service KPIs identify efficiency and maturity opportunities, and lead their implementation.
- Standardize onboarding, reporting templates,



and proof-of-execution artifacts across the client portfolio.
- Client Engagement & Advisory
- Lead complex or strategic client onboardings and support onboarding of all new CTEM & CPEN clients.
- Represent the service in exposure reviews, QBRs, and escalations communicating risk posture and remediation strategy to technical and executive stakeholders.
- Collaborate with sales engineering and practice leadership on scoping, service evolution, and client expansion.

What we’re looking for

- 9-12+ years in vulnerability management, security operations, penetration testing, or related cybersecurity disciplines, including 1-2+ years of team lead, mentorship, or people-management responsibility.
- Advanced, hands-on expertise with Qualys (VMDR/TruRisk) or an equivalent enterprise VM platform, including administration and tuning.
- Demonstrated experience designing or refining vulnerability/exposure management processes, SLAs, and runbooks.
- Robust command of CTEM frameworks, risk-based prioritization (CVSS/EPSS/asset criticality), and the end-to-end remediation lifecycle.
- Experience overseeing security automation/orchestration; familiarity with agentic or AI-assisted security operations is a strong plus.
- Proven client-facing delivery experience in an MSSP/MXDR or consulting environment.
- Bachelor’s degree in a related field or equivalent experience.
- Advanced certifications such as CISSP, OSCP, GPEN, GWAPT, GIAC GEVA, or Qualys VMDR Specialist.
- Experience with continuous/automated penetration testing platforms (NodeZero, Pentera, Cymulate) and adversary emulation.
- Scripting and automation proficiency (Python, PowerShell, KQL) and ServiceNow workflow design.
- Familia

📌 Architect I (Gurugram)
🏢 Insight Enterprises
📍 Gurugram