Information & Cybersec Lead

Job description

The Vulnerability Analyst is expected to perform the following activities: • Perform vulnerability assessment and security configuration assessment activities across servers, network devices, databases, security devices, operating systems, and other infrastructure components. • Execute scheduled and ad-hoc scans using VA/SCA tools and ensure scan coverage, scan health, authentication status, and scan quality. • Analyze vulnerability assessment results to identify true positives, false positives, exceptions, and remediation requirements. • Coordinate with GIT, GIS, application, infrastructure, and other internal teams for remediation tracking and closure of identified vulnerabilities gaps. • Prepare and publish vulnerability, remediation, SLA, and exception reports for internal governance and management review. • Track remediation progress and follow up with respective teams to ensure timely closure as per defined SLA. • Support validation of remediated vulnerabilities through rescans or evidence review. • Maintain accurate records of findings, exceptions, risk acceptance, false positives, and remediation evidence. • Support internal and external audit requirements by providing required vulnerability management and compliance artifacts. • Monitor threat advisories, critical vulnerabilities, and threat intelligence updates relevant to the organization’s technology environment. • Escalate risks, delays, scan failures, authentication issues, or remediation challenges to senior team members or management as required. • Contribute to continuous improvement of the Vulnerability Management and Security Configuration Management program from a process and technology standpoint. • Maintain professional communication with stakeholders and support a solution-focused approach in issue resolution. Key Responsibilities The Vulnerability Analyst is expected to perform the following activities: • Perform vulnerability assessment and security configuration assessment activities across servers, network devices, databases, security devices, operating systems, and other infrastructure components. • Execute scheduled and ad-hoc scans using VA/SCA tools and ensure scan coverage, scan health, authentication status, and scan quality. • Analyze vulnerability assessment results to identify true positives, false positives, exceptions, and remediation requirements. • Coordinate with GIT, GIS, application, infrastructure, and other internal teams for remediation tracking and closure of identified vulnerabilities gaps. • Prepare and publish vulnerability, remediation, SLA, and exception reports for internal governance and management review. • Track remediation progress and follow up with respective teams to ensure timely closure as per defined SLA. • Support validation of remediated vulnerabilities through rescans or evidence review. • Maintain accurate records of findings, exceptions, risk acceptance, false positives, and remediation evidence. • Support internal and external audit requirements by providing required vulnerability management and compliance artifacts. • Monitor threat advisories, critical vulnerabilities, and threat intelligence updates relevant to the organization’s technology environment. • Escalate risks, delays, scan failures, authentication issues, or remediation challenges to senior team members or management as required. • Contribute to continuous improvement of the Vulnerability Management and Security Configuration Management program from a process and technology standpoint. • Maintain professional communication with stakeholders and support a solution-focused approach in issue resolution. Skill Requirements • 3 to 6 years of relevant experience in Information Security, Vulnerability Management, IT Security Operations, or Infrastructure Security. • Hands-on experience with Vulnerability Assessment tools such as Qualys, Tenable, Rapid7 Nexpose. • Experience in analyzing vulnerability scan results, compliance scan results, remediation evidence, and exception requests. • Good understanding of vulnerability lifecycle management, including identification, prioritization, assignment, remediation tracking, validation, and closure. • Knowledge of infrastructure technologies including Windows, Linux, network devices, databases, virtualization, storage, and security devices. • Awareness of cybersecurity frameworks and benchmarks such as CIS Benchmarks, NIST, OWASP, and OSSTMM. • Working knowledge of standards and regulatory requirements such as ISO 27001, PCI DSS, SOC 1/2, and HIPAA. • Good understanding of CVEs, CVSS, threat advisories, vendor patches, exploitability, and risk-based vulnerability prioritization. • Experience in preparing reports, dashboards, trackers, and management updates related to vulnerabilities and compliance findings. • Strong written and verbal communication skills with the ability to coordinate with technical and non-technical stakeholders. Educational Qualification • Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or a related discipline. Other Requirements Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. • Disclaimer • Privacy Statement • Terms of use • Sitemap • Raise a Grievance • We use cookies on our site. Please read more about cookies policy here. • Opens in a new tab. • Opens in a new tab. • Opens in a new tab. • Opens in a new tab. • Opens in a new tab. • Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: • "route" is used for session stickiness • "careerSiteCompanyId" is used to send the request to the correct data center • "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor • "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cook