Senior Analyst - Vulnerability Management

Position Description
Company Profile:
At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve. At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve results for our clients - and for our members. Come grow with us. Learn more at www.cgi.com.
This is a great opportunity to join a winning team. CGI offers a competitive compensation package with opportunities for growth and professional development. Benefits for full-time, permanent members start on the first day of employment and include a paid time-off program and profit participation and stock purchase plans. We wish to thank all applicants for their interest and effort in applying for this position, however, only candidates selected for interviews will be contacted. No unsolicited agency referrals please.
Job Title: Senior Analyst Vulnerability Management
Position: Senior Analyst Vulnerability Management
Experience: 5-7 Years
Category: Infrastructure /Cloud
Location: Bangalore
Position ID: J0826-0453
Employment Type: Full-time
Responsible for Infrastructure IT Security and SOC operations to perform periodic scans and identify the threats associated with vulnerabilities.
This role is for a SOC Vulnerability Management (Cyber Security Analyst)
will be part of the GTS Security SOC team. In this role, you will involve in supporting India and global regional needs. The objectives of the Security Department (RESG/GTS/SEC) are to manage the strategy for all RESG/GTS in terms of security, technical standards, processes and tools, and thus to cover many cross functional functions within the company and subsidiaries across all regions. Conduct Network and System Vulnerability assessments and documentation of corrective/remediation actions, Drive the end to end vulnerability lifecycle from discovery to closure, Identify internal and external threats that could result in unauthorized disclosure, misuse, alteration, or destruction of customer's information assets ,Identify and prioritize all vulnerabilities in client environments and provide timely vulnerability assessment reports to key stakeholders, Ensure timely follow up with patch management and vulnerability remediation in coordination with Countermeasures personnel
Responsible for understanding, reviewing, and interpreting assessment and scanning results, reducing false positive findings, and acting as a trusted security advisor to the client.
Identify and prioritize all vulnerabilities in client environments and provide timely vulnerability assessment reports to key stakeholders
Develop and report enterprise level metrics for vulnerabilities and remediation progress
Present Vulnerability report to clients and triaging to priorotize the remediation
Analysis of vulnerability: based on group standards, manage the alerting on critical vulnerability found by a vulnerability scan and follow the mitigation with remediation teams
Ability to identify false positives
Knowledge of vulnerability management frameworks and concepts such as CVE, and CVSS scoring systems and attacking vectors
Dashboard: generate monthly and quarterly reports and dashboards.
Implement automated, proactive security measures
Security process improvement
Hands on Qualys modules – Vulnerability Management, Policy Compliance, Web Application Scanning, Cloud Agent, Asset View
Profile
Any degree or equivalent
Information Security, SOC, Vulnerability Management, Qualys guard
Good Communication Skills, Teamwork, Flexibility
Minimum 3 experience working with security teams in lead roles in SOC etc.
Service Now, ITSM, Qualys guard Experience using scripting languages (Python or similar, PowerShell scripts, bash)
Knowledge of technical aspects of the Security Assessment processes is an added advantage
Energetic and matured and focus on collective Success
Demonstrate commitment & Team Spirit by inspiration, exemplarity, care and sustainability
Effective interpersonal skills in a multi cultural team environment
Self starter and Self motivated with the ability to work independently and efficiently as well as with a team of peers
Expertise in Excel/Word & Power Point and other office/productive tools.
Good communication skills on both written, spoken and presentation skills
Quick learner and proactively take ownership
Good in coordination and communication skills
FOREIGN LANGUAGE: French
Your future duties and responsibilities
Required Qualifications To Be Successful In This Role
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
Come join our team—one of the largest IT and business consulting services firms in the world.

Work arrangement
No