Lead Analyst - Vulnerability Management

Eaton is seeking a Lead Analyst for Vulnerability Management in Pune, Maharashtra, India. This role is crucial for identifying, tracking, and verifying the remediation of vulnerabilities across internal and external applications and systems. The successful candidate will conduct in-depth vulnerability analysis, operate scanning tools, and collaborate with various IT teams, including infrastructure, product development, supply chain, and cybersecurity operations, to minimize Eaton's attack surface. Staying abreast of the latest technological advancements and threat landscapes is essential to safeguard modern and legacy technologies, applications, and business processes.

Key Responsibilities:

• Monitor for vulnerabilities in applications, endpoints, databases, networking, and cloud services.
• Perform continuous discovery, vulnerability assessment, and track remediation status for enterprise-wide assets.
• Provide guidance on best practices for vulnerability reduction and remediation to responsible teams.
• Analyze vulnerability data to identify trends and patterns.
• Regularly report on the criticality, exploit probability, business impact, and remediation strategies for identified vulnerabilities.
• Act as a primary contact for new and existing vulnerability-related issues.
• Collaborate with business teams and cybersecurity stakeholders to establish appropriate governance and document risks.
• Deliver vulnerability education and guidance to stakeholders, developers, IT, and business leaders.
• Maintain documentation for vulnerability policies and procedures.
• Assist in maintaining records of Eaton assets, their vulnerability status, remediation recommendations, overall security posture, and potential business threats.
• Identify opportunities for process improvement and automation within the team.
• Perform additional duties as assigned, including on-call rotations.

Qualifications:

• Bachelor’s degree in a technical discipline.
• 5-8 years of overall professional experience.
• Minimum of 3 years of experience in security operations or vulnerability management.

Skills:

• Strong analytical skills to understand vulnerabilities and exploits.
• Proficiency with commercial and open-source vulnerability management solutions.
• Understanding of TTPs, MITRE ATT&CK framework, CVSS, OSINT, and deception techniques.
• Knowledge of operating systems, applications, infrastructure, and cloud computing services.
• Familiarity with OWASP and CVSS scoring systems.
• Ability to comprehend technical infrastructure, managed services, and third-party dependencies.
• Experience with vulnerability management across AWS, Azure, or Google Cloud Platform is preferred.
• Experience with Python or Powershell for scripting, automation, and integrations.
• Threat hunting or red teaming experience is a plus.
• Excellent communication skills for effective interaction across all organizational levels.
• Strong project management, multitasking, and organizational abilities.