Information Security Analyst

The role

The Information Security Analyst will support the Vulnerability Management Program. This person will coordinate and manage vulnerability assessment and penetration testing activities across cloud, on-premises, and corporate environments.

What you will do

• Coordinate internal and external Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Perform authenticated and unauthenticated vulnerability scans using enterprise vulnerability management tools.
• Review, validate, triage, and prioritize vulnerabilities based on CVSS, exploitability, business impact, and organizational risk.
• Track vulnerabilities through remediation and verify closure.
• Monitor compliance with vulnerability remediation SLAs and escalate overdue findings.
• Work with Product Engineering, Cloud Operations, Infrastructure, IT, and DevOps teams to ensure timely remediation.
• Coordinate with external penetration testing vendors for scheduled assessments and remediation validation.
• Prepare vulnerability reports, dashboards, metrics, and executive summaries.
• Support monthly and quarterly reporting on vulnerability trends, MTTR, backlog, SLA compliance, and remediation effectiveness.
• Assist in maintaining vulnerability management processes, standards, and documentation.

Required qualifications

• Experience in Vulnerability Assessment and Penetration Testing (VAPT).
• Basic understanding of network, operating system, and web application security.
• Familiarity with common vulnerabilities such as those listed in the OWASP Top 10 and Common Weakness Enumeration (CWE).
• Understanding of CVSS scoring and vulnerability prioritization.
• Exposure to vulnerability management tools such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar platforms.
• Basic understanding of cloud security concepts.
• Exposure to SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or Microsoft Defender XDR.
• Familiarity with Windows and Linux operating systems.
• Good analytical and problem-solving skills.
• Strong written and verbal communication skills.

Nice to have

• 2-4 years of experience in the field of Vulnerability Management.
• Familiarity with the unique cybersecurity challenges associated with cloud-based energy market applications is a plus.
• Bachelor's degree in Computer Science, Information Security, or a related discipline.
• Relevant certifications such as CISSP, CEH (or currently pursuing) are desirable.
• Exposure to scripting using PowerShell or Python is an advantage.
• Knowledge of ISO 27001, SOC 2, NIST CSF, or CIS Controls is desirable.
• Azure preferred

About the company

Energy Exemplar's mission lies in ‘Empowering Transformative Energy Decisions’. Founded in 1999 in Adelaide, Australia, the company provides a software portfolio for modeling and simulation used by organizations globally.