Security Analyst- Vulnerability Management

Candidates typically face a three‑stage process: an initial timed online test covering aptitude, basic networking and scripting, followed by a technical interview where interviewers probe knowledge of vulnerability scanning tools, CVE analysis and remediation workflows. The final HR round assesses cultural fit, communication skills and motivation. Interviews are moderately challenging; thorough preparation on CVSS scoring, Tenable/Qualys basics and real‑world remediation case studies helps candidates stand out.

Round 1: Online aptitude and technical assessment (multiple choice and basic scripting) → Round 2: Technical interview focusing on vulnerability management concepts, tools and scenario‑based problem solving → Round 3: HR interview covering cultural fit, communication skills and career aspirations

SHI promotes a results‑driven yet flexible work culture where employees are encouraged to experiment with new technologies and share knowledge through regular hackathons and brown‑bag sessions. The company offers clear career ladders, mentorship programs and a healthy work‑life balance, especially for remote employees.

Bachelor’s degree in Cybersecurity, Information Technology, Information Security or a related engineering/technology discipline. Minimum aggregate of 60% (or CGPA 6.0/10). No active backlogs at the time of joining. Freshers from the 2025, 2026 or 2027 batch are welcome. Certifications such as CompTIA Security+, CySA+ or GIAC fundamentals are a plus but not mandatory.

SHI (Strategic Hiring Innovations) is a fast‑growing technology staffing and solutions firm that partners with global enterprises to deliver end‑to‑end IT services, cloud migrations and cybersecurity programs. Headquartered in India with a strong presence across major metros, SHI prides itself on a culture of continuous learning, merit‑based growth and a collaborative environment where fresh talent can work alongside seasoned security professionals. The company’s commitment to innovation is reflected in its investment in modern security platforms, automation tools and a robust knowledge‑sharing ecosystem that encourages employees to stay ahead of emerging threats. The role of Security Analyst – Vulnerability Management is a cornerstone of SHI’s Threat and Vulnerability Management (TVM) program. Reporting to the Sr. Manager – InfoSec, the analyst will operate from a home office setup while supporting 24/7 security operations. The primary focus is to identify, assess, prioritize and drive remediation of vulnerabilities across a diverse portfolio of servers, endpoints, cloud workloads, network devices and applications. By translating raw scan data into actionable remediation tickets and collaborating with asset owners, the analyst helps reduce the organization’s cyber risk footprint. Key Responsibilities: 1. Conduct regular vulnerability scans using platforms such as Tenable, Qualys or similar tools. 2. Analyse scan results, categorize findings by severity (CVSS) and map them to business impact. 3. Research CVEs, vendor advisories and threat intelligence feeds to validate relevance. 4. Create, assign and track remediation tickets, ensuring SLA compliance. 5. Monitor remediation progress, follow‑up with stakeholders and escalate blockers. 6. Maintain and update vulnerability management policies, procedures and documentation. 7. Generate weekly and monthly reports/dashboard for senior leadership. 8. Participate in vulnerability review meetings and provide risk‑based recommendations. 9. Contribute to automation initiatives using PowerShell, Python or REST APIs. 10. Support incident response activities for critical or zero‑day vulnerabilities. Tech Stack & Tools: Tenable / Qualys, CVSS scoring, Windows Server, Linux, Azure & AWS cloud services, PowerShell, Python scripting, REST APIs, SIEM integration, PCI DSS and CIS Controls frameworks. Growth Path: Starting as an Associate Analyst, high performers can progress to Senior Vulnerability Analyst, Threat Management Lead, or broader InfoSec roles such as Security Architect or GRC Manager. SHI offers certifications sponsorship, internal training labs and exposure to large‑scale enterprise environments. Why Join SHI? The company offers a remote‑first model, competitive entry‑level salary, mentorship from industry veterans, and a clear roadmap for professional advancement. Fresh graduates get hands‑on experience with industry‑leading tools, real‑world remediation projects and the chance to contribute to a robust security posture for Fortune‑500 clients.