{"id":3039286,"url":"https://alion.io/job/airbus-vulnerability-management-control-efficacy-analyst","title":"Vulnerability Management & Control Efficacy Analyst","company":{"id":3100,"name":"Airbus","domain":"airbus.com","url":"https://alion.io/company/airbus","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":616,"ghost_share":0.002,"stale_share":0.669,"repost_share":0.013,"time_to_fill_p50_days":27,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":35000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-03-12T00:00:00Z","employer_posted_date":"2026-03-12","last_verified_at":"2026-10-29T11:32:15Z","board_verified":true,"closed_at":null,"days_open":231,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":231},"description":"Job Description:\nVulnerability Management & Control Efficacy Analyst\nThe Role\nQuantify security effectiveness by moving from qualitative assessments to data-driven risk modeling. You will bridge the gap between technical vulnerability data and financial risk, ensuring that control failures and security gaps are measured, prioritized, and remediated based on their actual business impact.\nKey Responsibilities\n⦁ Quantitative Risk Modeling: Run Monte Carlo simulations to calculate Annual Loss Expectancy (ALE) and use Bayesian inference to update risk probabilities based on internal vulnerability telemetry and external evidence.\n⦁ Vulnerability Life Cycle & Analysis: Collate and track vulnerabilities in a centralized platform, mapping them directly to the corporate security risk register across all divisions.\n⦁ Perform multi-dimensional analysis to determine prioritization scores, determining which vulnerabilities require immediate correction based on Threat Intelligence, vulnerability intelligence, and aggregated incident response data.\n⦁ Streamline and optimize various vulnerability management processes to reduce \"Mean Time to Remediate\" (MTTR).\n⦁ Governance & Escalation: Support the Security Governance Department with remediation follow-up; continuously monitor risk posture and escalate major risks that exceed the company's risk appetite.\n⦁ Control Efficacy: Use Linear Regression to correlate vulnerability metrics (e.g., patch latency) with business downtime and financial loss.\n⦁ AI Automation: Apply AI Prompt Engineering to automate KRI/KPI generation using Python/SQL and to interpret complex statistical outputs for executive reporting.\nRequired Qualifications\n⦁ Experience: 4+ years in Cybersecurity, Vulnerability Management, or Quantitative Risk.\n⦁ Statistics: Understanding of probability distributions (Lognormal, Poisson, Beta) and statistical significance (p-values, $R^2$).\n⦁ Technical Skills: Proficiency in Python or R for data modeling and SQL for querying security telemetry.\n⦁ Vulnerability Expertise: Deep understanding of the vulnerability management life cycle, prioritization frameworks (CVSS, EPSS), and technical control failure modes.\nPreferred Qualifications\n⦁ Frameworks: Proficiency with FAIR (Factor Analysis of Information Risk).\n⦁ Cloud: Experience managing security controls in AWS, Azure, or GCP.\n⦁ Certifications: CRISC, CISM, or CISSP.\nExpected Attributes in a potential Candidate:\n1. Adaptive Flexibility: Pivots effectively in response to shifting priorities and organizational change.\n2. Intellectual Humility: Values external expertise and prioritizes the best solution over personal ego.\n3. Accountability: Takes full ownership of outcomes and focuses on remediation rather than excuses.\n4. Critical Thinking: Analyzes objective data to make informed, logical business decisions.\n5. Resiliency: Maintains consistent performance and a solution-oriented mindset under high pressure.\n6. Effective Communication: Distills complex ideas into clear, actionable information for all stakeholders.\n7. Collaborative Orientation: Prioritizes cross-functional goals and team success over individual recognition.\n8. Solution-Focused Initiative: Proactively identifies challenges and presents viable resolutions independently.\n9. Emotional Intelligence: Navigates interpersonal dynamics with self-awareness and professional tact.\n10. Continuous Improvement: Actively seeks feedback and upskilling opportunities to refine performance.\nThis job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.\nCompany:\nAirbus India Private LimitedEmployment Type:\nPermanent-------\nExperience Level:\nProfessionalJob Family:\nCyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.\nAirbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.\nAirbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to .\nAt Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.","description_format":"text","description_chars":4691,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Defense Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-21T22:16:15Z"}],"visa":[],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":1,"p_active":0.117,"p_room":0.28,"age_days":231,"expected_fill_days":27,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/airbus-vulnerability-management-control-efficacy-analyst","json_url":"https://alion.io/job/airbus-vulnerability-management-control-efficacy-analyst.json","meta":{"generated_at":"2026-10-29T12:07:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18087,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3100},"rest":"https://alion.io/mcp/rest/get_company?id=3100"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fairbus-vulnerability-management-control-efficacy-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fairbus-vulnerability-management-control-efficacy-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fairbus-vulnerability-management-control-efficacy-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/airbus-vulnerability-management-control-efficacy-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fairbus-vulnerability-management-control-efficacy-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3039286}},{"tool":"search_jobs","arguments":{"company":"airbus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3039286},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}