Add office photos
All Filters
16 Triton Group Jobs
Senior Security Analyst - Vulnerability Management
5-10 years
Hyderabad / Secunderabad
1 vacancy
Senior Security Analyst - Vulnerability Management
Triton Group
posted 1d ago
Job Role Insights
Fixed timing
Key skills for the job
Job Description
The Senior Vulnerability Management Analyst performs security assessments of container images and application platform code within the enterprise environment and identifies where the container images and code deviate from acceptable configurations and/or policies and standards.
You will work in collaboration with Cyber Defense, Risk, Product Security, and Application Engineering teams to drive vulnerability remediation across the enterprise environment and visualize vulnerability risk and performance metrics to executive leadership.
ESSENTIAL DUTIES/RESPONSIBILITIES
- Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas.
- Exhibit good understanding of vulnerability validation, re-production, remedy advice and vulnerability research skills.
- Prepare reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
- Engage with various internal teams to conduct holistic response management on identified vulnerabilities and the remediation efforts.
- Articulate likelihood of exploitation and impact to IT leaders with the proven ability to convey the urgency and need to remediate vulnerabilities commensurate with the risk they present.
- Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense.
JOB REQUIREMENTS AND QUALIFICATIONS
Education:
Bachelors degree from an accredited college or university, or equivalent experience. A degree in Computer Science, Computer/Data Systems Management or a related field or discipline is preferred but not required.
Training Requirements (licenses, programs, or certificates): One or more of the following desired but not required
- ISC(2) Certified Information Security Services Professional (CISSP
- Burp Suite Certified Practitioner
- Certified Application Security Engineer (CASE)
Experience:
- 5+ years related experience in Engineering/IT Operations, Security Operations, Vulnerability Management, DevSecOps, and/or Incident Response in large enterprise environments.
- Hands-on experience with Prisma Cloud, ServiceNow Application Vulnerability Response, Jira, Invicti, SonarQube.
- Hands-on experience with cloud infrastructure providers such as OCI and AWS.
Other Knowledge, Skills and Abilities:
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
- Skill in communicating complex technical information to an executive audience.
- Skill in utilizing Python for data analysis.
- Skill in conducting vulnerability scans and recognizing vulnerabilities in complex systems.
- Skill in how to write and tune behavioral rules in Invicti and SonarQube.
- Skill in conducting application vulnerability assessments.
- Skill in recognizing, assessing, and understanding cloud container vulnerabilities.
- Knowledge and understanding of the Agile Scrum framework.
WORK ENVIRONMENT/OTHER INFORMATION (Travel required, physical requirements, on-call schedules, etc.)
- Minimal travel required
- Work in a clean, pleasant, and comfortable office setting
- This role requires daily on-site presence at our Hyderabad office to collaborate with team members and participate in in-person meetings.
- The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- This position is 100% in office.
Employment Type: Full Time, Permanent
Read full job description What people at Triton Group are saying
What Triton Group employees are saying about work life
based on 17 employees
Strict timing
Monday to Saturday
Within country
Day Shift
Triton Group Benefits
View more benefits
Compare Triton Group with
TCS
Compare
Accenture
Compare
Cognizant
Compare
Wipro
Compare
Capgemini
Compare
HDFC Bank
Compare
ICICI Bank
Compare
Infosys
Compare
HCLTech
Compare
Tech Mahindra
Compare
Genpact
Compare
Teleperformance
Compare
Concentrix Corporation
Compare
Axis Bank
Compare
Amazon
Compare
Jio
Compare
Reliance Retail
Compare
IBM
Compare
iEnergizer
Compare
HDB Financial Services
Compare
Similar Jobs for you
Senior Security Analyst - Vulnerability Management
5-10 Yrs
Hyderabad / Secunderabad
Senior Data Product Manager - Data Enablement
6-10 Yrs
Hyderabad / Secunderabad
Manager, Security Engineering and Automation
2-3 Yrs
Hyderabad / Secunderabad
Share an Interview