vulnerability management analyst

Tata Consultancy Services (TCS)

<div></div><div><div><div><p>Experience &amp; Knowledge Vulnerability Management,Qualys guard , ServiceNow &middot; Executed and experienced in Manual Penetration Testing &middot; Performed Threat modelling &amp; Threat profiling &middot; Security testing related certifications &ndash; CEH, AppScan Certified etc &middot; Conducted secure code reviews &middot; Formulated Pen Testing plans &amp; strategies &middot; Good Security Report
</p></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Analyst</div>
</div><div><div><b>Job Id</b></div>
<div>402868</div>
</div><div><div><b>Desired Skills</b></div>
<div>VAPT | VAPT Nexpose Rapid 7</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF BUSINESS STUDIES, BACHELOR OF COMMERCE, BACHELOR OF COMPUTER APPLICATION</div></div></div><div></div>

Application security / Penetration Testing/VAPT(OSCP)

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Vulnerability Analyst II &ndash; Job Description</b></h1><b>
Position Title: </b>Vulnerability Analyst II<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Vulnerability Analyst II provides cybersecurity risk, vulnerability management, and compliance support services in alignment with the SBA Enterprise Cybersecurity Services (ECS) RFQ Task Area 3.5.2. The position supports the SBA Risk Management Framework (RMF), FISMA compliance initiatives, Information System Continuous Monitoring (ISCM), vulnerability management, controls assessment activities, audit support, and continuous monitoring operations across enterprise systems and cloud environments. The analyst performs vulnerability assessments, supports POA&amp;M development, validates security controls, coordinates remediation efforts, and assists Information System Security Officers (ISSOs) and system owners with maintaining compliant and secure systems.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Perform enterprise vulnerability assessments and compliance scans using SBA-approved tools such as Tenable Security Center (SC), Nessus, and Microsoft TVM.</li><li>
Review identified vulnerabilities, assess impact and risk, and provide remediation recommendations for operating systems, applications, network devices, and cloud environments.</li><li>
Support continuous monitoring and Risk Management Framework (RMF) activities in accordance with NIST SP 800-37, NIST SP 800-53 Rev. 5, and NIST SP 800-53A.</li><li>
Assist with the creation, maintenance, and review of cybersecurity documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&amp;Ms), Configuration Management Plans (CMPs), and contingency documentation.</li><li>
Support control assessments and validation activities by documenting NIST 800-53A Determine If Statements (DISs) and mapping vulnerabilities to applicable controls.</li><li>
Conduct vulnerability scanning activities every 72 hours across workstations, servers, routers, switches, and cloud-based assets in accordance with SBA requirements.</li><li>
Monitor CISA Known Exploited Vulnerabilities (KEV) listings and Binding Operational Directives (BODs) to identify and report emerging risks.</li><li>
Track zero-day vulnerabilities, coordinate remediation activities, and provide ad hoc reporting to leadership and stakeholders.</li><li>
Generate weekly vulnerability reports, dashboards, and briefing materials for ISSOs, system owners, and management.</li><li>
Assist with audit preparation and support activities involving IG, GAO, internal auditors, and external assessors.</li><li>
Maintain scanning infrastructure including scanner deployment, configuration, plugin updates, scan repositories, and vulnerability management SOPs.</li><li>
Support FedRAMP Continuous Monitoring (CONMON) activities by reviewing vulnerability reports and assessing vendor remediation activities.</li><li>
Participate in change management, security operations meetings, and enterprise cybersecurity coordination activities.</li><li>
Ensure all deliverables are complete, accurate, aligned with agency templates, and delivered within required timeframes.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline. Additional years of experience may substitute for degree requirements.</li><li>
3&ndash;6 years of experience supporting vulnerability management, cybersecurity compliance, RMF, or information assurance activities in a federal environment.</li><li>
Experience performing vulnerability assessments and remediation activities using Tenable SC/Nessus or equivalent tools.</li><li>
Knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, NIST SP 800-53A, NIST SP 800-137, and related federal cybersecurity standards.</li><li>
Experience supporting POA&amp;M management, security assessments, continuous monitoring, and audit response activities.</li><li>
Working knowledge of Windows, Linux/Unix, network infrastructure, cloud platforms, and enterprise security technologies.</li><li>
Strong written and verbal communication skills with the ability to produce technical documentation and executive-level reports.</li><li>
Ability to analyze security findings, prioritize risks, and coordinate remediation with technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Ethical Hacker (CEH)</li><li>
GIAC Security Certifications (GSEC, GPEN, or similar)</li><li>
Tenable Certified Professional or equivalent vulnerability management certification</li></ul><p>
</p><p>Gupkg0JOaj</p></div>

SBA - Vulnerability Analyst II

Creative Information Technology India

<div></div><div><div><div><div><div><div><b>About us<br>
</b></div></div><div><div>Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.<br>
</div><div></div><br>
<div>Join us in driving growth and seizing new business opportunities.<br>
</div></div></div><br>
<div><div><div><b>Role and Responsibilities<br>
</b></div></div><div></div><br>
<div><div><b>Vulnerability SE I: </b>This role performs the function of a system engineer level I that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE I role will primarily be responsible for working with the vulnerability management system to identify specific vulnerabilities to be remediated, research the correct remediation configuration and develop or update dashboards within the vulnerability management system to track remediation. The position may also assist a system engineer level II and the cybersecurity team in developing, deploying, and validating specific deployment scripts, automations, and/or installer packages to remediate specific vulnerabilities.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Research and identify specific configurations to remediate identified vulnerabilities.
</li><li>Work with the System Engineer II to develop automations, scripts, deployment packages, and/or customized installers to remediate vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Familiar with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience working with client management platforms e.g. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Knowledge of PowerShell, VBScript, and/or batch scripting.
</li>Knowledge of security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public platforms.<br>
<li>
</li></ul><div></div><br>
<div><b>Vulnerability SE II: </b>This role performs the function of a system engineer level II that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE II role will primarily be responsible for working with the vulnerability management system and system engineer I to remediate identified vulnerabilities, develop deployment objects, deploy remediations and correct any existing vulnerability deployment objects. The role will work with the city&rsquo;s cybersecurity team to develop communications and follow city requirements with regards to change management.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Develop Active Directory group policies, automations, scripts, deployment packages and/or customized installers to remediate vulnerabilities.
</li><li>Assist in the identification and research of remediation configurations for identified vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Experience with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience with client management platforms i.e. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Experience with PowerShell, VBScript, and/batch scripting.
</li><li>Experience working with Microsoft Active Directory and Active Directory Group Policies
</li><li>Experience working with Microsoft Entra.
</li>Experience with security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public cloud platforms.<br>
<li>
</li></ul></div></div><br>
<div><div><div><b>Minimum Qualification<br>
</b></div></div><div><div><b>Minimum/Special/Additional Requirements Vulnerability SE I:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus two (2) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to six (6) years in fields utilizing the knowledge, skills and abilities in technology systems, systems 3 functions and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator or Programmer Analyst.
</li>May be required to have a current and valid driver&rsquo;s license.<br>
<li>
</li></ul><div></div><div><b>Vulnerability SE II:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus four (4) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to eight (8) years in fields utilizing the knowledge, skills, and abilities in technology systems, systems 3 functions, and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator, or Programmer Analyst.
</li><li>May be required to have a current and valid driver&rsquo;s license.</li></ul></div></div></div></div></div>

Senior Vulnerability Systems Engineer – Virginia Beach, VA

Tikal Group Doha

<p>Job Opportunity: Cybersecurity Analyst</p><p><b>Location:</b> Doha, Qatar<br/><b>Company:</b> Tikal Group Doha</p><p>About Us</p><p>Tikal Group Doha is a technology solutions provider specializing in secure systems integration, IT infrastructure, and digital transformation. We are committed to protecting businesses against evolving cyber threats and ensuring the highest standards of data security. As we expand, we are seeking a skilled <b>Cybersecurity Analyst</b> to strengthen our security operations and safeguard our digital assets.</p><p>Role Overview</p><p>The <b>Cybersecurity Analyst</b> will be responsible for monitoring, analyzing, and responding to security incidents, ensuring compliance with regulatory standards, and proactively identifying vulnerabilities. This role requires technical expertise, analytical skills, and the ability to collaborate across teams to maintain a secure IT environment.</p><p>Key Responsibilities</p><ul><li>Monitor and analyze security alerts, logs, and incidents.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity threats and breaches.</li><li>Implement and maintain security tools, firewalls, and intrusion detection systems.</li><li>Ensure compliance with Qatari regulations and international cybersecurity standards.</li><li>Collaborate with IT teams to strengthen system defenses and patch vulnerabilities.</li><li>Prepare reports and recommendations for management on security posture.</li><li>Stay updated on emerging threats, trends, and best practices in cybersecurity.</li></ul><p>Qualifications</p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>2&ndash;5 years of experience in cybersecurity analysis or IT security.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST, CIS).</li><li>Proficiency in SIEM tools, firewalls, and endpoint protection systems.</li><li>Experience with incident response, vulnerability management, and risk assessment.</li><li>Excellent problem-solving, analytical, and communication skills.</li><li>Ability to thrive in a fast-paced, multicultural environment.</li></ul><p>Why Join Us?</p><ul><li>Be part of a growing cybersecurity team in Doha.</li><li>Play a key role in protecting Tikal Group Doha&rsquo;s digital infrastructure.</li><li>Competitive salary and benefits package.</li><li>Opportunities for professional development and career advancement.</li><li>Supportive, innovation-driven, and security-focused work culture.</li></ul><p>Pay: Up to QAR35,000.00 per month</p><p>Work Location: In person</p>

Cybersecurity Analyst

ATSG

<div><p><b>Information Security Analyst</b></p>
<p><b>
What you will do:
</b></p><p>The Information Security Analyst will assist in the development of a NIST 800-171 / CMMC Cybersecurity policy, system security plans, perform GAP Analysis and recommend security enhancements to management and I.T. staff. This person will coordinate activities related to remediation of findings from vulnerability scans, penetration testing, security, and risk assessments, and in many cases remediate vulnerabilities within the network. Will serve as liaison to 3rd party security managed services and be an internal subject matter expert and/or project lead for all current and future cyber security initiatives. In cooperation with System Administrators, this position will play a hands-on role in working with technology to secure computer and network systems, including but not limited to installing SSL certs, Antivirus, Active Directory, Vulnerability Scanners, Phishing simulations, and analyzing the impact of system configuration changes, software/hardware installations and the latest common vulnerabilities and exposures. This position reports to the Manager of Systems Administration.</p>
<p><b>
What you need:</b></p>
<ul>
<li>Bachelor&rsquo;s degree in computer science, technology, or equivalent experience</li>
<li>Knowledge or networks; TCP/IP, DNS, Firewalls, Windows and Linux Servers, VMWare, Nutanix, Active Directory, MFA and Encryption</li>
<li>Excellent planning and organizational skills</li>
<li>Strong written and verbal communication skills</li>
<li>Ability to work independently and as part of a team</li>
</ul>
<p><b>Preferred Skills</b></p>
<ul>
<li>Certification such as Security +, CISSP, CEH are a plus</li>
<li>Experience with NIST, CMMC and Sox requirements are a plus</li>
<li>Experience with anti-virus, threat analysis and security testing tools are a plus</li>
<li>Ability to contribute to DR planning a plus</li></ul></div>

ATSG IS SECURITY ANALYST

CareCloud

<div></div><div><div>Department: INFORMATION SECURITY Experience: 3 YearsDeadline: May 31, 2026Location: BAGH, Pakistan</div><div><h4 class="jobSectionHeader"><b>
Job Profile</b></h4><p></p><div><p><b>
Job Description:</b></p>
<p>We are looking for a skilled Senior SOC Analyst to strengthen our Security Operations Center at CareCloud&rsquo;s Bagh AJK office. The ideal candidate will have 3&ndash;4 years of hands-on experience in cybersecurity operations, threat monitoring, incident response, and vulnerability management. This role requires expertise in detecting, analyzing, and responding to security threats while supporting SOC operations effectively.</p>
<p></p><p><b>Key Responsibilities:</b></p>
<ul><li>Monitor and analyze security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection systems.</li>
<li>Investigate and respond to security incidents, including containment, remediation, and documentation.</li>
<li>Conduct vulnerability assessments and assist in penetration testing exercises.</li>
<li>Maintain detailed incident logs and prepare reports for management.</li>
<li>Support the SOC Manager in developing and refining SOC processes and workflows.</li>
<li>Stay updated on emerging cyber threats, attack vectors, and mitigation techniques.</li>
<li>Collaborate with IT, network, and application teams to resolve security issues.</li>
<li>Assist in training and mentoring junior SOC Analysts.</li>
</ul>
</div><p></p><div><h4 class="jobSectionHeader"><b>Tools / Skills</b></h4><p></p><div><p><b>
Experience:</b></p>
<ul><li>3&ndash;4 years in SOC operations, cybersecurity monitoring, or incident response roles.</li>
<li>Hands-on experience with SIEM, IDS/IPS, endpoint protection, and firewall management.</li>
<li>Exposure to penetration testing, vulnerability management, and ethical hacking preferred.</li>
</ul>
<p><b>Skills:</b></p>
<ul><li>Strong analytical and problem-solving skills.</li>
<li>Knowledge of cybersecurity frameworks like NIST, ISO 27001, or MITRE ATT&amp;CK.</li>
<li>Ability to prioritize and manage multiple security incidents simultaneously.</li>
<li>Excellent written and verbal communication skills.</li>
<li>Proactive and able to work with minimal supervision.</li>
</ul>
<p><b>Qualifications:</b></p>
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field.</li>
<li>Relevant certifications preferred: CEH, OSCP, CISSP (Associate), or CompTIA Security+.</li></ul></div></div></div></div><p></p>
<br><div><h5 class="jobSectionHeader"><b>Additional Information</b></h5><div><div><p><b>
Total Position(s)
</b></p><p>2 Positions</p></div><div><p><b>
Gender</b></p><p>
Does not matter</p></div><div><p><b>
Minimum Education</b></p><p>
Bachelors Degree</p></div><div><p><b>
Degree Title</b></p><p>
Bachelors Degree</p></div><div><p><b>
Shift</b></p><p>
Evening</p></div><div><p><b>
Nature of Job</b></p><p>
Work From Office</p></div></div></div>

Senior Soc Analyst

PC99 Technologies & Innovation Group

<p><b>Job Title:</b> Senior Cybersecurity Analyst</p><p>Join a Forward-Thinking Cybersecurity Team</p><p>PC99 Technologies &amp; Innovation Group is seeking a highly skilled <b>Senior Cybersecurity Analyst</b> to help protect critical systems, data, and infrastructure in an evolving threat landscape. This role is ideal for professionals who enjoy solving complex security challenges, working with advanced tools, and making a measurable impact on organizational security.</p><p>What You&rsquo;ll Do</p><ul><li>Monitor, detect, and respond to cybersecurity threats using SIEM and SOC tools</li><li>Conduct vulnerability assessments, penetration testing, and risk analysis</li><li>Investigate security incidents and perform root cause analysis</li><li>Develop and implement security policies, standards, and procedures</li><li>Collaborate with IT teams to strengthen network, cloud, and endpoint security</li><li>Analyze threat intelligence and proactively mitigate risks</li><li>Ensure compliance with frameworks such as ISO 27001, NIST, and CIS</li><li>Lead incident response efforts and recommend remediation strategies</li><li>Prepare reports and communicate findings to technical and non-technical stakeholders</li></ul><p>What We&rsquo;re Looking For</p><ul><li>5+ years of experience in cybersecurity, information security, or SOC environments</li><li>Strong knowledge of SIEM platforms, IDS/IPS, firewalls, and endpoint security tools</li><li>Experience with vulnerability management and penetration testing</li><li>Familiarity with cloud security (AWS, Azure, or GCP)</li><li>Understanding of security frameworks such as ISO 27001, NIST, or CIS</li><li>Relevant certifications preferred (CISSP, CEH, CISM, Security+)</li><li>Strong analytical and problem-solving skills</li><li>Clear communication and documentation abilities</li></ul><p>Why Join PC99 Technologies &amp; Innovation Group</p><ul><li>Work on high-impact cybersecurity projects across industries</li><li>Collaborative and innovation-focused environment</li><li>Opportunities for professional development and career progression</li><li>Exposure to modern security technologies and enterprise systems</li></ul><p>Compensation and Schedule</p><ul><li>Competitive salary with performance-based incentives</li><li>Full-time position with standard business hours and occasional on-call rotation</li></ul><p>About the Company</p><p>PC99 Technologies &amp; Innovation Group is a growing technology firm specializing in cybersecurity, digital transformation, and advanced IT solutions. The company partners with organizations to strengthen their security posture and deliver scalable, future-ready systems.</p><p>Apply Now</p><p>If you are ready to advance your cybersecurity career and work on meaningful security initiatives, submit your application today.</p><p>Pay: RO1,800.000 - RO3,200.000 per month</p><p>Work Location: In person</p>

Senior Cybersecurity Analyst

Search 10000+ Vulnerability management analyst jobs near you this May. New roles added regularly across leading industries. Apply today.