Cyber Risk Analyst

Our partner is looking for a Cyber Risk Analyst based in India.

• Conduct recurring vulnerability scans across enterprise assets and accurately report identified vulnerabilities and security weaknesses.
• Monitor and review vulnerability and compliance scan results, tracking remediation progress against defined service objectives.
• Support senior analysts in developing risk-based remediation plans and recommending practical solutions for identified vulnerabilities.
• Analyze vulnerabilities in the context of exploitability, threat activity, business impact, and overall security exposure to help prioritize remediation efforts.
• Stay current with emerging threats, vulnerability disclosures, attack techniques, and developments in vulnerability management.
• Configure and refine vulnerability scanning systems to reduce false positives, minimize noise, and improve focus on meaningful security events.
• Maintain strong working relationships with internal teams and stakeholders while contributing to effective customer-facing security services.
• Manage multiple projects and priorities independently while maintaining high standards of documentation, communication, and customer service.
• Participate in continuous learning to strengthen knowledge of vulnerability management, risk analytics, attack surface management, and evolving security technologies.

• At least 1 year of experience in vulnerability assessment or attack surface management, preferably covering both IT and OT environments.
• Degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Entry-level knowledge of vulnerability management practices, risk analytics, and risk modeling.
• Practical experience using vulnerability scanning platforms such as Nessus or Tenable.
• Understanding of network-based, system-level, cloud, and application-layer attacks and common mitigation approaches.
• Familiarity with vulnerability classification and scoring methodologies, including CVSS, CVE, and CWE, with a clear understanding of the difference between risk and severity.
• Ability to analyze vulnerability trends and optimize scanning or assessment processes to focus on genuine security risks.
• Strong written and verbal communication skills, with the ability to document findings and present security information clearly to customers and stakeholders.
• Strong analytical, organizational, and prioritization skills, with the ability to manage several projects in a fast-paced environment.
• Excellent customer service and relationship-building skills.
• Ability to work effectively both independently and as part of a collaborative security team.
• Willingness to support a 24/7/365 service model, including occasional work outside standard business hours, weekends, and holidays.
• Legal authorization to work in India without requiring employer sponsorship.

• Remote-first working model, offering flexibility for employees based in India.
• Global, collaborative environment with opportunities to work alongside cybersecurity professionals and diverse teams.
• Employee-led diversity and inclusion networks supporting community, education, and advocacy.
• Annual charity initiatives, fundraising activities, and employee volunteer opportunities.
• Global sustainability initiatives focused on reducing environmental impact.
• Fitness, trivia, and other global employee engagement activities.
• Global wellbeing days designed to support rest and recharge.
• Monthly wellbeing webinars and training focused on health and overall wellbeing.
• Opportunities for continuous professional development and learning in cybersecurity and vulnerability management.