Cyber Security Analyst - VM & Threat Intelligence

Zee is looking for a motivated and hands-on Cyber Security Analyst - Vulnerability Management and Threat Intelligence Specialist to join our growing cybersecurity team. In this role, you will be responsible for managing the end-to-end vulnerability management lifecycle and driving actionable threat intelligence to proactively reduce risk across enterprise environments. The ideal candidate will have strong hands-on experience with vulnerability assessment tools, threat intelligence platforms, security analytics, and automation, along with a proactive security mindset.

The core responsibilities for the job include the following:

Vulnerability Management:

• Own and enhance the vulnerability management program across network, server, cloud, and application environments.
• Perform regular vulnerability assessments using tools such as Qualys and other industry-standard scanners.
• Analyze scan results and prioritize vulnerabilities based on risk, exploitability, business impact, and threat context.
• Work closely with infrastructure, cloud, application, and DevOps teams to drive timely and effective remediation.
• Develop, review, and maintain vulnerability management policies, procedures, and SLAs.
• Validate remediation through rescans and continuous monitoring.

Threat Intelligence and Threat Hunting:

• Monitor, analyze, and investigate emerging cyber threats, vulnerabilities, and attack trends using CloudSEK, Mandiant, and other threat intel sources.
• Conduct dark web and OSINT monitoring to identify data leaks, credential exposure, brand abuse, or targeted threats.
• Correlate threat intelligence with internal security events using SIEM platforms in collaboration with the SOC team.
• Support proactive threat-hunting activities leveraging frameworks such as MITRE ATT& CK.
• Analyze IoCs and translate them into detection and prevention use cases.

Security Automation and Engineering:

• Assist in automating vulnerability management and threat intelligence workflows using SOAR platforms and scripting (Python/PowerShell preferred).
• Leverage AI/ML-based security tools where applicable to improve detection, enrichment, prioritization, and reporting.
• Integrate threat intelligence feeds with SIEM, SOAR, EDR, and other security tools.

Web Application and WAF Security:

• Support Web Application Firewall (WAF) operations, including rule tuning, false-positive analysis, and incident investigation.
• Collaborate with application security teams to align WAF controls with application-level risks and vulnerabilities.

Reporting and Stakeholder Management:

• Prepare and present clear, risk-based reports on vulnerability posture, remediation status, and threat landscape for senior management.
• Provide actionable intelligence briefings highlighting emerging threats and potential business impact.
• Act as a trusted security advisor to internal stakeholders.

Requirements:

• 2-5 years of hands-on experience in vulnerability management, threat intelligence, or SOC operations.
• Strong experience with Qualys (or similar vulnerability management platforms).
• Hands-on experience with threat intelligence platforms such as CloudSEK, Mandiant, Recorded Future, or equivalent.
• Working knowledge of SIEM tools and security event analysis.
• Understanding of MITRE ATT& CK, cyber kill chain, and attacker TTPs.
• Basic scripting or automation experience (Python, PowerShell, or similar).
• Familiarity with WAF technologies and web application security concepts.
• Good understanding of networking, operating systems, and common vulnerabilities (OWASP Top 10, CVEs, CWEs).
• Strong analytical, documentation, and communication skills.

Good to Have (Added Value):

• Security certifications are a strong plus, such as CEH, Security+, GSEC, and vendor-specific certifications (Qualys, cloud security, SIEM, and WAF).
• Exposure to cloud security (AWS / Azure / GCP) environments.
• Experience integrating or using AI/ML-driven security platforms for risk prioritization or threat detection.
• Experience with SOAR platforms and playbook development.
• Prior experience in a media, OTT, or large-scale enterprise environment.