Senior Lead Engineer - IT

Senior Vulnerability Management Analyst

The Senior Vulnerability Management Analyst role is part of the Guardian Security Assurance Department in India. This position will work alongside other Guardian India Security Assurance colleagues and Guardian US Security Assurance colleagues and will be focused on identifying, analyzing, and prioritizing security vulnerabilities, as well as supporting remediation through Guardian's Vulnerability and Exposure Management Program.

This role is intended for an experienced analyst who can independently assess vulnerability risk, apply exposure management concepts, and provide meaningful challenge and guidance to technology teams. The position will receive strategic direction and mentorship from the Lead Engineer of Vulnerability Management from US.

The Security Assurance Department is responsible for identifying gaps in people, process, and technology controls, assessing risk to the business, and ensuring responsible parties are aware of identified issues and are planning appropriate actions to reduce exposure and risk.

You Will:

• Analyze vulnerabilities (CVEs) across infrastructure, applications, AI, and cloud technologies
• Evaluate exploitability, attack paths, and real business impact beyond base severity scores
• Use exposure management concepts to prioritize vulnerabilities based on reachability and risk
• Think like a threat actor to understand realistic exploitation scenarios
• Partner with platform, system, cloud, and application teams to drive remediation
• Provide clear, risk-based guidance and challenge gaps in remediation plans
• Use data from vulnerability and posture management tools to support decisions
• Support vulnerability rating, prioritization, and exception management processes
• Contribute to metrics that measure risk reduction and program effectiveness
• Escalate vulnerabilities that represent high or unmanaged risk
• Continuously improve vulnerability and exposure management processes and automation

Required Qualifications:

• 3–5 years of experience in vulnerability management, security analysis, or a related cybersecurity role
• Strong understanding of vulnerabilities, CVEs, and common attack techniques
• Proven ability to analyze vulnerabilities beyond headline CVSS scores, including exploitability and business impact
• Experience partnering with remediation teams (e.g., infrastructure, application, or cloud teams) to drive risk reduction
• Hands-on experience using vulnerability management or cloud security tools such as:
• Tenable
• Qualys
• Prisma Cloud
• or similar technologies
• Ability to clearly communicate security risk and remediation expectations to both technical and non-technical audiences
• Demonstrated ability to work independently while collaborating within a multi-functional assurance or security team
• Willingness and ability to adjust priorities or approach based on business needs and leadership direction
• Continuous learner who stays current on emerging threats, vulnerabilities, and security trends

Location:

This position can be based in any of the following locations:

Chennai

Current Guardian Colleagues: Please apply through the internal Jobs Hub in Workday