Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

For Employers

Add office photos

Employer? Claim Account for FREE

Sophos Technologies

Compare

3.9

based on 200 Reviews

8 Sophos Technologies Jobs

Cyber Risk Analyst II

Sophos Ltd.

3.9

based on 200 Reviews

2-4 years

Kolkata, Mumbai, New Delhi + 4 more

1 vacancy

Cyber Risk Analyst II

Sophos Technologies

posted 9d ago

Job Role Insights

Flexible timing

Key skills for the job

Computer Science Information Technology Recruitment Vulnerability Management Cisa Security Operations Center

+ 4 more

Job Description

Review recurring assessments for enterprise assets, report on discovered vulnerabilities, and guide customers mitigation strategies, tracking remediation against service objectives
Assist in the development of risk-based remediation plans with proposed solutions for identified vulnerabilities
Perform research and analysis of vulnerability assessments; contextualize and prioritize results to guide customers remediation efforts
Develop impactful reports and presentations that support the achievement of engagement goals and objectives
Collaborate with stakeholders to prioritize vulnerability remediation and address potential attack vectors
Stay informed about the threat landscape to maintain current knowledge of vulnerabilities and adapt security measures accordingly
Engage in continuous, self-driven learning to stay current on trends, strategies, and technologies in the Vulnerability Management space
Identify opportunities for efficiencies in process and innovative approaches to completing scope of work
Maintain strong working relationships and credibility amongst groups within the Sophos Managed Services organization
What you will bring
Bachelor s degree(or higher) in one or more of the following fields: Cybersecurity, Information Technology, Computer Science or a related field; or relevant commensurate work experience
2-4 years of experience in conducting vulnerability assessments, attack surface management preferably in both IT and OT (Operational Technology) environments
Exceptional writing, documentation, and presentation skills to effectively communicate findings to customers/stakeholders
Advanced understanding of Vulnerability Management practices and risk analytics/modeling
Skilled in prioritization of impactful vulnerabilities and able to minimize noise often associated with vulnerability management tools
Proficient in utilizing vulnerability scanning tools, e.g., Tenable
Basic understanding of vulnerability classification and scoring methodologies (CVSS, CVE, CWE, NVD), as well as exploitability likelihood models such as EPSS, CISA KEV, Tenable VPR
Familiarity with compliance frameworks including, but not limited to: ISO27001, SOC2, SOX, GDPR, HIPPA, PCI-DSS, and State/FedRAMP
Knowledgeable about cybersecurity best practices and frameworks, including SANS Top 20 Critical Security Controls, NIST Cybersecurity Framework, MITRE ATTCK Framework, CIS Controls, and OWASP Top 10
Advanced understanding of network-based, system-level, cloud, and application-layer cyber-attacks and their mitigation methods
Must be able to thrive within a team environment as well as on an individual basis
Skilled in managing time independently while juggling multiple projects concurrently in a fast-paced environment
Superior customer service skills