{"id":4196091,"url":"https://alion.io/job/insight-principal-engineer-3","title":"Principal Engineer","company":{"id":2556,"name":"Insight","domain":"insight.com","url":"https://alion.io/company/insight","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":81,"open_postings":20,"ghost_share":0.1,"stale_share":0.45,"repost_share":0.15,"time_to_fill_p50_days":40,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ITSM","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false},{"name":"HIPAA","optional":true},{"name":"NIST CSF","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-07-24T14:23:00Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T20:37:32Z","board_verified":true,"closed_at":null,"days_open":111,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":111},"description":"Requisition Number: 105816\nPrincipal Engineer (Cyber Exposure)\nLocation: This is a hybrid opportunity in Delhi NCR, Bangalore, Hyderabad, Gurugram, Pune, Trivandrum area.\nInsight at a Glance\n14,000+ engaged teammates globally with operations in 25 countries across the globe.\nReceived 35+ industry and partner awards in the past year\n$9.2 billion in revenue\n#20on Fortune’s World'sBest Workplaces™ list\n#14 on Forbes World's Best Employers in IT - 2023\n#23 on Forbes Best Employers for Women in IT- 2023\n$1.4M+ total charitable contributions in 2023 by Insight globally\nNow is the time to bring your expertise to Insight. We are not just a tech company; we are a people-first company. We believe that by unlocking the power of people and technology, we can accelerate transformation and achieve extraordinary results. As a Fortune 500 Solutions Integrator with deep expertise in cloud, data, AI, cybersecurity, and intelligent edge, we guide organisations through complex digital decisions.\nAbout the role\nThe Attack Surface Support Analyst is a foundational member of the Continuous Threat Exposure Management (CTEM) and Continuous Penetration Testing (CPEN) delivery team within Insight’s Managed Security Services organization. The analyst is responsible for the day-to-day work of discovering, validating, prioritizing, and tracking remediation of vulnerabilities and exposures across managed client environments. Leveraging enterprise vulnerability management platforms such as Qualys, the analyst works in concert with automated and agentic workflows to ensure exposures are continuously cataloged, risk-ranked, and driven to verified closure. The analyst partners closely with the Managed Infrastructure Services team to dispatch and confirm remediation, supports onboarding of new clients, and sustains engagements throughout the contract lifecycle.\nKey Responsibilities:\nVulnerability Management & Risk-Based Prioritization\nOperate vulnerability management tooling (Qualys VMDR/TruRisk and equivalent platforms) to discover, catalog, and enrich an accurate inventory of assets and exposures across hybrid on-premises, Azure, and AWS client environments. \nPrioritize remediation using risk-based scoring that combines CVSS, EPSS, exploit availability, threat intelligence, and asset criticality - not raw severity alone - to focus effort on the exposures that matter most. \nValidate findings to confirm exploitability and reduce false positives before remediation is dispatched. \nMaintain exposure dashboards and metrics (mean time to remediate, SLA adherence, exposure trend lines) and surface emerging risk to senior analysts and clients. \nAutomated & Agentic Workflow Operations\nMonitor and interact with automated and agentic workflows supporting risk-based validation, prioritization, and remediation dispatch for vulnerabilities. \nApply human-in-the-loop oversight by reviewing agentic recommendations for accuracy, confirming high-impact actions, and escalating anomalies or low-confidence outputs. \nProvide tuning feedback to continuously improve automation logic, detection content, and orchestration playbooks. \nRemediation Lifecycle & Ticketing\nOwn the ticketing and remediation lifecycle from finding through verified closure within the ITSM platform (ServiceNow preferred). \nOperate integrated patching tools and coordinate with the Managed Infrastructure Services team to apply patches, configuration changes, or compensating controls. \nTrack SLAs and manage exceptions including documented risk acceptances, and confirm closure through rescan and validation. \nClient Onboarding & Engagement Support\nSupport onboarding of new CTEM & CPEN clients - scanner deployment, asset scoping, credentialed scan configuration, connector/integration setup, and baseline establishment. \nSustain active engagements for the full contract duration, participating in recurring client touchpoints, reporting cycles, and exposure review meetings. \nContribute to client-facing deliverables including remediation guidance, status reporting, and proof-of-execution artifacts. \nWhat we’re looking for\nRequired Qualifications\n6-10 years of experience in vulnerability management, security operations, IT systems administration, or a related cybersecurity discipline. \nHands-on experience with at least one enterprise vulnerability management platform - Qualys strongly preferred; Tenable, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management acceptable. \nWorking understanding of CVSS, EPSS, and risk-based vulnerability prioritization concepts. \nFamiliarity with patch and endpoint management tooling (e.g., Microsoft Intune/SCCM, automated patching solutions). \nExperience operating within an ITSM/ticketing platform (ServiceNow preferred) for workflow and tracking. \nSolid grasp of networking, Windows and Linux operating systems, and common enterprise infrastructure. \nBachelor’s degree in Information Security, Computer Science, or a related field - or equivalent practical experience. \nPreferred Qualifications\nIndustry certifications such as CompTIA Security+, Network+, CySA+, Qualys VMDR certification, or GIAC GFACT. \nExposure to penetration testing or automated/continuous pen testing platforms (e.g., NodeZero, Pentera, Cobalt) and the Gartner CTEM framework. \nFamiliarity with SOAR/security automation and scripting (PowerShell, Python, KQL). \nUnderstanding of compliance frameworks (NIST CSF, CIS Controls v8, HIPAA/HITECH) as they relate to exposure management. \nPrior experience in a managed services (MSSP/MXDR) or client-facing delivery environment. \nCore Competencies\nDetail orientation and analytical rigor - comfortable working with large data sets and prioritization logic. \nClear communication - able to translate technical findings into actionable remediation guidance for varied audiences. \nCollaboration and service mindset - works effectively across SOC, infrastructure, and client teams. \nCuriosity and adaptability - eager to learn evolving CTEM/CPEN tooling and agentic workflows. \nWhat you can expect\nWe’re legendary for taking care of you, your family and to help you engage with your local community. We want you to enjoy a full, meaningful life and own your career at Insight. Some of our benefits include:\nFreedom to work from another location-even an international destination-for up to 30 consecutive calendar days per year.\nMedical Insurance\nHealth Benefits\nProfessional Development: Learning Platform and Certificate Reimbursement\nShift Allowance\nBut what really sets us apart are our core values of Hunger, Heart, and Harmony, which guide everything we do, from building relationships with teammates, partners, and clients to making a positive impact in our communities.\nJoin us today, your ambITious journey starts here.\nWhen you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.\nAt Insight, we celebrate diversity of skills and experience so even if you don’t feel like your skills are a perfect match - we still want to hear from you!Today's talent leads tomorrow's success. Learn more about Insight:\nhttps://www.linkedin.com/company/insight/\n\nInsight does not accept unsolicited resumes from recruiters or employment agencies. Unsolicited resumes will be treated as direct applications from the candidate, and recruiters or agencies who submit candidates for this position without a prior, written vendor agreement will not be eligible for any form of compensation, even if the candidate is hired.\nInsight is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.\nInsight India Location:Level 16, Tower B, Building No 14, Dlf Cyber City In It/Ites Sez, Sector 24 &25 A Gurugram Gurgaon Hr 122002 India","description_format":"text","description_chars":7942,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Health insurance","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed IT Services (MSP)","Systems Integrators","Cloud Consulting & Migration","IT Resellers & VARs"],"lifecycle":[{"event":"open","at":"2026-11-12T20:37:32Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.617,"p_room":0.28,"age_days":111,"expected_fill_days":40,"reasons":["conf:4","win:tail","crowd:brand"],"computed_at":"2026-11-13T00:49:17Z"},"pay":null,"html_url":"https://alion.io/job/insight-principal-engineer-3","json_url":"https://alion.io/job/insight-principal-engineer-3.json","meta":{"generated_at":"2026-11-13T00:49:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1825,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2556},"rest":"https://alion.io/mcp/rest/get_company?id=2556"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finsight-principal-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finsight-principal-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finsight-principal-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/insight-principal-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finsight-principal-engineer-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4196091}},{"tool":"search_jobs","arguments":{"company":"insight.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4196091},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}