Security Analyst

Role Summary :

The Senior Endpoint Vulnerability Analyst supports vulnerability remediation efforts across enterprise endpoints (laptops, servers), network devices, cloud instances and Application environments. This role executes the vulnerability remediation lifecycle for assigned work—triage, risk-based prioritization, root-cause analysis, solution validation, deployment coordination, and reporting—partnering with security, operations, engineering, dark web, brand Monitoring and application teams. The ideal candidate demonstrates endpoint technical depth, works independently on complex issues, contributes to automation and process improvements, and supports governance activities (SLAs, exception handling, and risk reporting) that improve the firm's overall risk posture.

Responsibilities:

• Monitor and analyze endpoint vulnerability findings using VA tools

• Assess findings to determine business impact, root cause, and remediation requirements

• Apply risk-based prioritization aligned to vulnerability severity, exploitability, asset criticality, and remediation SLAs

• Coordinate endpoint remediation activities, including Windows and macOS updates and configuration changes

• Patch management activities (OS and third-party applications)

• Partner with testing teams to validate remediation solutions prior to deployment

• Create and manage ServiceNow incidents/requests and change records; support the change management process

• Coordinate remediation execution with cross-functional teams (testing, deployment, operations, policy, and application owners)

• Provide endpoint troubleshooting support related to vulnerabilities and remediation deployments

• Facilitate meetings with internal teams (and business partners, as needed) to drive timely vulnerability resolution

• Maintain remediation tracking data (task lists, status, owners, and timelines)

• Prepare regular status reporting on remediation progress, exceptions, and outstanding risk

• Support remediation exceptions and risk acceptance/waiver workflows; ensure documentation and approvals meet governance requirements

• Produce and communicate vulnerability remediation metrics (e.g., aging, SLA attainment, recurrence) and provide insights to support decision-making.

• Use AI platforms to create dashboard and improvise real time vulnerabillity tracking and reporting

• Prioritize and manage multiple concurrent remediation efforts in a deadline-driven environment

• Follow established security, operational, and documentation standards; document work performed and outcomes

• Build strong working relationships with partner teams to ensure consistent remediation outcomes

• Identify recurring remediation gaps and contribute to process improvements (standard operating procedures, playbooks, automation) to reduce repeat vulnerabilities.

• Monitor dark web, deep web, Telegram and threat forums for organisational exposure, leaked credentials and sensitive data.

• Monitor brand impersonation, phishing websites, fake domains, typo squatting and fraudulent social media accounts.

• Identify and assess credential leaks, data leaks and emerging threats impacting the organisation, brands and executives.

• Coordinate takedown of malicious domains, phishing sites and impersonation accounts.

• Triage alerts, assess risk and coordinate remediation with SOC, IT, Legal and business teams.

• Maintain threat exposure dashboards and management reports with key risks and remediation status.

• Integrate relevant intelligence and IOCs with SIEM/SOC operations for proactive threat detection.

People Management :

The incumbent holds no direct supervisory responsibilities but is expected to engage effectively within their function and collaboratively across cross-functional teams. This role contributes meaningfully, whether through operational contributions and/or by offering specialized expertise, guidance, and support, to ensure alignment with either functional and/or strategic organizational goals and objectives.

People / Technical Competencies :

Experience with vulnerability scanning and reporting tools (e.g., Tenable/Nessus)

Experience with endpoint security, patching, or vulnerability remediation processes

PowerShell scripting skills (writing, testing, troubleshooting, or modifying scripts)

Working knowledge of AI platforms and new tools utilisation

Proficiency with Microsoft 365 tools (Excel, PowerPoint, Word) for tracking and communication

Experience using ticketing and change management platforms

Experience with remote support and troubleshooting tools.

Experience: 4+ years of experience in vulnerability management, patch management, or a closely related discipline