Cyber Risk Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Risk Analyst based in India.

As a Cyber Risk Analyst, you will help organizations proactively identify and reduce cybersecurity exposure across their environments.

You will assess vulnerabilities, analyze scan results, and support risk-based remediation strategies.

The role combines technical investigation with practical security recommendations and customer collaboration.

You will work across enterprise assets and gain exposure to IT and operational technology environments.

Your analysis will help distinguish critical risks from lower-priority findings and reduce unnecessary security noise.

Working alongside experienced security professionals, you will continuously develop your vulnerability management and risk analysis expertise.

This is a fast-paced, remote role supporting a 24/7 security service with a strong focus on measurable customer outcomes.

Accountabilities:

• Conduct recurring vulnerability scans across enterprise assets and accurately report identified vulnerabilities and security weaknesses.
• Monitor and review vulnerability and compliance scan results, tracking remediation progress against defined service objectives.
• Support senior analysts in developing risk-based remediation plans and recommending practical solutions for identified vulnerabilities.
• Analyze vulnerabilities in the context of exploitability, threat activity, business impact, and overall security exposure to help prioritize remediation efforts.
• Stay current with emerging threats, vulnerability disclosures, attack techniques, and developments in vulnerability management.
• Configure and refine vulnerability scanning systems to reduce false positives, minimize noise, and improve focus on meaningful security events.
• Maintain strong working relationships with internal teams and stakeholders while contributing to effective customer-facing security services.
• Manage multiple projects and priorities independently while maintaining high standards of documentation, communication, and customer service.
• Participate in continuous learning to strengthen knowledge of vulnerability management, risk analytics, attack surface management, and evolving security technologies.

Requirements:

• At least 1 year of experience in vulnerability assessment or attack surface management, preferably covering both IT and OT environments.
• Degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Entry-level knowledge of vulnerability management practices, risk analytics, and risk modeling.
• Practical experience using vulnerability scanning platforms such as Nessus or Tenable.
• Understanding of network-based, system-level, cloud, and application-layer attacks and common mitigation approaches.
• Familiarity with vulnerability classification and scoring methodologies, including CVSS, CVE, and CWE, with a clear understanding of the difference between risk and severity.
• Ability to analyze vulnerability trends and optimize scanning or assessment processes to focus on genuine security risks.
• Strong written and verbal communication skills, with the ability to document findings and present security information clearly to customers and stakeholders.
• Strong analytical, organizational, and prioritization skills, with the ability to manage several projects in a fast-paced environment.
• Excellent customer service and relationship-building skills.
• Ability to work effectively both independently and as part of a collaborative security team.
• Willingness to support a 24/7/365 service model, including occasional work outside standard business hours, weekends, and holidays.
• Legal authorization to work in India without requiring employer sponsorship.

Benefits:

• Remote-first working model, offering flexibility for employees based in India.
• Global, collaborative environment with opportunities to work alongside cybersecurity professionals and diverse teams.
• Employee-led diversity and inclusion networks supporting community, education, and advocacy.
• Annual charity initiatives, fundraising activities, and employee volunteer opportunities.
• Global sustainability initiatives focused on reducing environmental impact.
• Fitness, trivia, and other global employee engagement activities.
• Global wellbeing days designed to support rest and recharge.
• Monthly wellbeing webinars and training focused on health and overall wellbeing.
• Opportunities for continuous professional development and learning in cybersecurity and vulnerability management.