Posted 17 July, 2026
Vulnerability Management Analyst
Diversity Nexus
Gurgaon, IN
Full Time
Reference: 26-00180-2458-1
Onsite role in Cyber City, Gurgaon India
Duration: 6 months contract with possibility of conversion afterwards
Years of experience: 6-10 years' experience
About the job
We are looking to hire a Vulnerability Management Analyst II to join our Vulnerability Management team. The Vulnerability Management Analyst II is a hands-on practitioner who identifies, analyzes, and drives remediation of vulnerabilities across our IT and OT environments. This role focuses on turning scan results into clear, prioritized actions for technology and business teams, ensuring that high-risk issues are understood, owned, and resolved within agreed timelines.
You will partner closely with infrastructure, application, cloud, and supply chain teams, as well as our cyber threat management functions, to reduce our attack surface and improve our overall security posture.
Responsibilities
Required Qualifications
Duration: 6 months contract with possibility of conversion afterwards
Years of experience: 6-10 years' experience
About the job
We are looking to hire a Vulnerability Management Analyst II to join our Vulnerability Management team. The Vulnerability Management Analyst II is a hands-on practitioner who identifies, analyzes, and drives remediation of vulnerabilities across our IT and OT environments. This role focuses on turning scan results into clear, prioritized actions for technology and business teams, ensuring that high-risk issues are understood, owned, and resolved within agreed timelines.
You will partner closely with infrastructure, application, cloud, and supply chain teams, as well as our cyber threat management functions, to reduce our attack surface and improve our overall security posture.
Responsibilities
- Run regular vulnerability scans across servers, endpoints, applications, cloud, and OT where in scope.
- Validate and triage findings, remove false positives, and prioritize issues based on risk.
- Create and manage remediation tickets, working with system and application owners to drive fixes.
- Track remediation progress against SLAs and escalate when deadlines or risk levels are not met.
- Prepare simple reports and dashboards that show trends, risk hot spots, and SLA performance.
- Recommend improvements to scanning scope, schedules, and processes to reduce blind spots and noise.
- Partner with security operations, threat Client, and incident response teams to connect vulnerabilities to real-world threats.
- Educate IT and OT partners on what needs to be fixed, why it matters, and how to prevent repeat issues.
Required Qualifications
- Bachelor's degree in computer science, information security, related degree, or measurable knowledge from serving in industry/military/government unit.
- Security+, Network+, GSEC, CySA+ or other relevant professional certifications
- 6+ years' professional experience working in cybersecurity or information technology
- Working knowledge of MITRE Telecommunication&CK, common attack techniques, and control families
- Hands on use of at least two tool categories such as Vuln Management, SIEM, EDR, NDR, IDS, DLP, SOAR, or cloud security tools
- Ability to read common log sources such as Windows events, Linux logs, proxy, DNS, and authentication logs
- Scripting or automation experience to pull data, parse outputs, or enrich cases
- Strong written and verbal communication tailored to the audience
