Security Vulnerability Analyst

Security Vulnerability Analyst

Experian seeks a skilled Security Vulnerability Analyst to assess, prioritize, and remediate security vulnerabilities across infrastructure, applications, and cloud environments. You will collaborate with cross-functional teams to evaluate vulnerability reporting efficacy, using frameworks like CVSS, EPSS, and organizational risk criteria. Key responsibilities include:

• Assessing and maintaining the usability of vulnerability reporting systems.
• Prioritizing remediation efforts using CVSS, CWE, CVE, and MITRE ATT&ACK Framework.
• Coordinating vulnerability remediation with infrastructure, application, and cloud teams.
• Evaluating remediation feasibility against SLAs and advising on compliance with security standards (PCI DSS, ISO 27001, SOC 2, NIST, HIPAA, CIS Controls).
• Monitoring emerging threats, zero-days, and vendor advisories to proactively mitigate risks.
• Creating reports and dashboards to track vulnerability trends, risk metrics, and remediation progress for technical and leadership stakeholders.
• Supporting exception reviews and risk acceptance documentation.
• Maintaining vulnerability management processes, documentation, and SOPs.
• Participating in incident response by providing vulnerability analysis and remediation recommendations.
• Optimizing security reporting to reduce recurring vulnerabilities and enhance overall security posture.

Ideal candidates will have:

• Education: Bachelor's degree in Cybersecurity, IT, or Computer Science (or equivalent experience).
• Experience: 2–5+ years in vulnerability management, cybersecurity, or information security.
• Technical Skills: Proficiency in vulnerability management tools (e.g., Tenable Nessus, Qualys VMDR, Rapid7 InsightVM, Microsoft Defender Vulnerability Management).
• Knowledge: CVSS scoring, CWE, CVE, MITRE ATT&CK Framework, OWASP Top 10, and cloud platforms (AWS/Azure/GCP).
• Soft Skills: Strong analytical, documentation, and problem-solving abilities; ability to communicate technical risks to non-technical stakeholders.
• Preferred Qualifications: Security certifications (e.g., CompTIA Security+, CySA+, GSEC, CISSP, GIAC); scripting experience (PowerShell/Python/Bash); familiarity with SIEM, EDR, and SOAR platforms; Agile/DevSecOps experience; threat intelligence integration.

Hyderabad, Telangana, India