Location: This is a hybrid prospect in Delhi NCR, Bangalore, Hyderabad, Gurugram, Pune, Trivandrum area.

14,000+ engaged teammates globally with operations in 25 countries across the globe.

- 23 on Forbes Best Employers for Women in IT- 2023
- $We are not just a tech company; We believe that by unlocking the power of people and technology, we can accelerate transformation and achieve extraordinary results. As a Fortune 500 Solutions Integrator with deep expertise in cloud, data, AI, cybersecurity, and intelligent edge, we guide organisations through complex digital decisions.

The Attack Surface Support Analyst is a foundational member of the Continuous Threat Exposure Management (CTEM) and Continuous Penetration Testing (CPEN) delivery team within Insight’s Managed Security Services organization. Leveraging enterprise vulnerability management platforms such as Qualys, the analyst works in concert with automated and agentic workflows to ensure exposures are continuously cataloged, risk-ranked, and driven to verified closure. The analyst partners closely with the Managed Infrastructure Services team to dispatch and confirm remediation, supports onboarding of new clients, and sustains engagements throughout the contract lifecycle.
Vulnerability Management & Risk-Based Prioritization

- Operate vulnerability management tooling (Qualys VMDR/TruRisk and equivalent platforms) to discover, catalog, and enrich an accurate inventory of assets and exposures across hybrid on-premises, Azure, and AWS client environments.
- Prioritize remediation using risk-based scoring that combines CVSS, EPSS, exploit availability, threat intelligence, and asset criticality — not raw severity alone — to focus effort on the exposures that matter most.
- Maintain exposure dashboards and metrics (mean time to remediate, SLA adherence, exposure trend lines) and surface emerging risk to senior analysts and clients.

Automated & Agentic Workflow Operations





- Monitor and interact with automated and agentic workflows supporting risk-based validation, prioritization, and remediation dispatch for vulnerabilities.
- Provide tuning feedback to continuously improve automation logic, detection content, and orchestration playbooks.

Own the ticketing and remediation lifecycle from finding through verified closure within the ITSM platform (ServiceNow preferred).

- Operate integrated patching tools and coordinate with the Managed Infrastructure Services team to apply patches, configuration changes, or compensating controls.
- Track SLAs and manage exceptions including documented risk acceptances, and confirm closure through rescan and validation.

Support onboarding of new CTEM & CPEN clients — scanner deployment, asset scoping, credentialed scan configuration, connector/integration setup, and baseline establishment.

- Sustain active engagements for the full contract duration, participating in recurring client touchpoints, reporting cycles, and exposure review meetings.
- 6-10 years of experience in vulnerability management, security operations, IT systems administration, or a related cybersecurity discipline.
- Hands-on experience with at least one enterprise vulnerability management platform — Qualys strongly preferred; Tenable, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management acceptable.
- Working understanding of CVSS, EPSS, and risk-based vulnerability prioritization concepts.
- Microsoft Intune/SCCM, automated patching solutions).
- Experience operating within an ITSM/ticketing platform (ServiceNow preferred) for workflow and tracking.
- Solid grasp of networking, Windows and Linux operating systems,



and common enterprise infrastructure.
- Bachelor’s degree in Information Security, Computer Science, or a related field — or equivalent practical experience.

Industry certifications such as CompTIA Security+, Network+, CySA+, Qualys VMDR certification, or GIAC GFACT.

- Familiarity with SOAR/security automation and scripting (PowerShell, Python, KQL).
- Prior experience in a managed services (MSSP/MXDR) or client-facing delivery environment.

Detail orientation and analytical rigor — comfortable working with large data sets and prioritization logic.

~ We’re legendary for taking care of you, your family and to help you engage with your local community. We want you to enjoy a full, meaningful life and own your career at Insight. Medical Insurance
Professional Development: Learning Platform and Certificate Reimbursement
Shift Allowance

But what really sets us apart are our core values of Hunger, Heart, and Harmony, which guide everything we do, from building relationships with teammates, partners, and clients to making a positive impact in our communities.

At Insight, we celebrate diversity of skills and experience so even if you don’t feel like your skills are a perfect match - we still want to hear from you!Today's talent leads tomorrow's success. Unsolicited resumes will be treated as direct applications from the candidate, and recruiters or agencies who submit candidates for this position without a prior, written vendor agreement will not be eligible for any form of compensation, even if the candidate is hired.

Insight is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.

Level 16, Tower B, Building No 14, Dlf Cyber City In It/Ites Sez, Sector 24 &25 A Gurugram Gurgaon Hr 122002 India

📌 Technology Principal Engineer (Gurugram)
🏢 Insight Enterprises
📍 Gurugram