Cyber Threat Exposure Management Analyst

About this role

Not quite right? These jobs in Bengaluru match the same skills — apply to a few to improve your chances.

Software Developer - Full stack (Python/React & AWS) - Digital for Mass Properties & Structure testing

Airbus

In OfficeBengaluru

Apply

FullStack Developer (React,AWS & Python)

Airbus

In OfficeBengaluru

Apply

Senior Engineer – C# .NET (AWS Cloud)

LSEG

In OfficeBengaluru

Apply

Senior AWS DevOps & Platform Engineer (6-9 Years)

Fractal

In OfficeBengaluru

Apply

Skills you'll use

What you'll do

• Attack Surface Management (ASM / EASM)
• Maintain a continuous inventory of Internet-facing assets, shadow IT, domains, subdomains, certificates, cloud services, APIs, and third-party-hosted assets.
• Operate EASM/CAASM tooling to surface unowned or unmanaged assets and route them to the correct owner.
• Enrich attack surface findings with threat intelligence, active exploitation trends, and KEV data to support prioritisation.
• Proactively identify gaps in asset coverage and bring forward improvement ideas without waiting to be directed.
• Vulnerability Management
• Own the end-to-end vulnerability lifecycle: identification, risk-based triage, remediation tracking, and closure validation.
• Apply CVSS, EPSS, and business context to set remediation SLAs and escalation paths.
• Maintain vulnerability management policies, standards, and reporting cadence aligned to ISO 27001 and NIST CSF.
• Break down complex vulnerability backlogs into prioritised, actionable components and drive them to closure with minimal supervision.

Who can apply

• Proactively identify gaps in asset coverage and bring forward improvement ideas without waiting to be directed.
• Own the end-to-end vulnerability lifecycle: identification, risk-based triage, remediation tracking, and closure validation.
• Apply CVSS, EPSS, and business context to set remediation SLAs and escalation paths.
• Maintain vulnerability management policies, standards, and reporting cadence aligned to ISO 27001 and NIST CSF.
• Break down complex vulnerability backlogs into prioritised, actionable components and drive them to closure with minimal supervision.
• Monitor cloud misconfigurations, identity risk, and posture drift across AWS, Azure, and OCI.
• Partner with cloud platform teams to remediate CSPM findings and reduce recurring misconfiguration classes.
• Extend CSPM coverage as new cloud services, apps, and workloads are onboarded.

About Version 1

Searching for “Version 1 jobs” or “jobs at Version 1”? You’re in the right place.