Cyber Risk Analyst

Accountabilities:

• • Conduct recurring vulnerability scans across enterprise assets and accurately report identified vulnerabilities and security weaknesses.
  • Monitor and review vulnerability and compliance scan results, tracking remediation progress against defined service objectives.
  • Support senior analysts in developing risk-based remediation plans and recommending practical solutions for identified vulnerabilities.
  • Analyze vulnerabilities in the context of exploitability, threat activity, business impact, and overall security exposure to help prioritize remediation efforts.
  • Stay current with emerging threats, vulnerability disclosures, attack techniques, and developments in vulnerability management.
  • Configure and refine vulnerability scanning systems to reduce false positives, minimize noise, and improve focus on meaningful security events.
  • Maintain strong working relationships with internal teams and stakeholders while contributing to effective customer-facing security services.
  • Manage multiple projects and priorities independently while maintaining high standards of documentation, communication, and customer service.
  • Participate in continuous learning to strengthen knowledge of vulnerability management, risk analytics, attack surface management, and evolving security technologies.

  Requirements:

  • At least 1 year of experience in vulnerability assessment or attack surface management, preferably covering both IT and OT environments.
  • Degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
  • Entry-level knowledge of vulnerability management practices, risk analytics, and risk modeling.
  • Practical experience using vulnerability scanning platforms such as Nessus or Tenable.
  • Understanding of network-based, system-level, cloud, and application-layer attacks and common mitigation approaches.
  • Familiarity with vulnerability classification and scoring methodologies, including CVSS, CVE, and CWE, with a clear understanding of the difference between risk and severity.
  • Ability to analyze vulnerability trends and optimize scanning or assessment processes to focus on genuine security risks.
  • Strong written and verbal communication skills, with the ability to document findings and present security information clearly to customers and stakeholders.
  • Strong analytical, organizational, and prioritization skills, with the ability to manage several projects in a fast-paced environment.
  • Excellent customer service and relationship-building skills.
  • Ability to work effectively both independently and as part of a collaborative security team.
  • Willingness to support a 24/7/365 service model, including occasional work outside standard business hours, weekends, and holidays.
  • Legal authorization to work in India without requiring employer sponsorship.

  Benefits:

  • Remote-first working model, offering flexibility for employees based in India.
  • Global, collaborative environment with opportunities to work alongside cybersecurity professionals and diverse teams.
  • Employee-led diversity and inclusion networks supporting community, education, and advocacy.
  • Annual charity initiatives, fundraising activities, and employee volunteer opportunities.
  • Global sustainability initiatives focused on reducing environmental impact.
  • Fitness, trivia, and other global employee engagement activities.
  • Global wellbeing days designed to support rest and recharge.
  • Monthly wellbeing webinars and training focused on health and overall wellbeing.
  • Opportunities for continuous professional development and learning in cybersecurity and vulnerability management.