Security Analyst
Zee Entertainment Enterprises Limited · Bangalore
Collected role description
<p><u><strong>Role Overview</strong></u></p> <p>Zee is looking for a motivated and hands-on Cyber Security Analyst – Vulnerability Management & Threat Intelligence Specialist to join our growing cybersecurity team.</p> <p>In this role, you will be responsible for managing the end-to-end vulnerability management lifecycle and driving actionable threat intelligence to proactively reduce risk across enterprise environments.</p> <p>The ideal candidate will have strong hands-on experience with vulnerability assessment tools, threat intelligence platforms, security analytics, and automation, along with a proactive security mindset.</p> <p><u><strong>Key Responsibilities</strong></u></p> <p><strong>Vulnerability Management</strong></p> <p>
- Own and enhance the vulnerability management program across network, server, cloud, and application environments.</p>
<p>
- Perform regular vulnerability assessments using tools such as Qualys and other industry-standard scanners.</p>
<p>
- Analyze scan results and prioritize vulnerabilities based on risk, exploitability, business impact, and threat context.</p>
<p>
- Work closely with infrastructure, cloud, application, and DevOps teams to drive timely and effective remediation.</p>
<p>
- Develop, review, and maintain vulnerability management policies, procedures, and SLAs.</p>
<p>
- Validate remediation through re-scans and continuous monitoring.</p>
<p><strong>Threat Intelligence & Threat Hunting</strong></p> <p>
- Monitor, analyze, and investigate emerging cyber threats, vulnerabilities, and attack trends using CloudSEK, Mandiant, and other threat intel sources.</p>
<p>
- Conduct dark web and OSINT monitoring to identify data leaks, credential exposure, brand abuse, or targeted threats.</p>
<p>
- Correlate threat intelligence with internal security events using SIEM platforms in collaboration with the SOC team.</p>
<p>
- Support proactive threat-hunting activities leveraging frameworks such as MITRE ATT&CK.</p>
<p>
- Analyze IoCs and translate them into detection and prevention use cases.</p>
<p><strong>Security Automation & Engineering</strong></p> <p>
- Assist in automating vulnerability management and threat intelligence workflows using SOAR platforms and scripting (Python/PowerShell preferred).</p>
<p>
- Leverage AI/ML-based security tools where applicable to improve detection, enrichment, prioritization, and reporting.</p>
<p>
- Integrate threat intelligence feeds with SIEM, SOAR, EDR, and other security tools.</p>
<p><strong>Web Application & WAF Security</strong></p> <p>
- Support Web Application Firewall (WAF) operations, including rule tuning, false-positive analysis, and incident investigation.</p>
<p>
- Collaborate with application security teams to align WAF controls with application-level risks and vulnerabilities.</p>
<p><strong>Reporting & Stakeholder Management</strong></p> <p>
- Prepare and present clear, risk-based reports on vulnerability posture, remediation status, and threat landscape for senior management.</p>
<p>
- Provide actionable intelligence briefings highlighting emerging threats and potential business impact.</p>
<p>
- Act as a trusted security advisor to internal stakeholders.</p>
<p><u><strong>Required Skills & Qualifications</strong></u></p> <p>
- 2–5 years of hands-on experience in Vulnerability Management, Threat Intelligence, or SOC operations.</p>
<p>
- Strong experience with Qualys (or similar vulnerability management platforms).</p>
<p>
- Hands-on experience with threat intelligence platforms such as CloudSEK, Mandiant, Recorded Future, or equivalent.</p>
<p>
- Working knowledge of SIEM tools and security event analysis.</p>
<p>
- Understanding of MITRE ATT&CK, cyber kill chain, and attacker TTPs.</p>
<p>
- Basic scripting or automation experience (Python, PowerShell, or similar).</p>
<p>
- Familiarity with WAF technologies and web application security concepts.</p>
<p>
- Good understanding of networking, operating systems, and common vulnerabilities (OWASP Top 10, CVEs, CWEs).</p>
<p>
- Strong analytical, documentation, and communication skills.</p>
<p><u><strong>Good to Have (Added Value)</strong></u></p> <p>
- Security certifications are a strong plus, such as:</p>
<p>
- CEH, Security+, GSEC</p>
<p>
- Vendor-specific certifications (Qualys, cloud security, SIEM, WAF)</p>
<p>
- Exposure to cloud security (AWS / Azure / GCP) environments.</p>
<p>
- Experience integrating or using AI/ML-driven security platforms for risk prioritisation or threat detection.</p>
<p>
- Experience with SOAR platforms and playbook development.</p>
<p>
- Prior experience in a media, OTT, or large-scale enterprise environment.</p>
<p><u><strong>Why Join Zee?</strong></u></p> <p>
- Opportunity to work in a large, complex, and high-visibility environment.</p>
<p>
- Hands-on exposure across vulnerability management, threat intelligence, automation, and WAF security.</p>
<p>
- Strong growth path into senior security engineering, purple team, or threat-hunting roles.</p>
<h2>Skills and expertise</h2> <ul> <li>Vulnerability Management</li> <li>Qualys</li> <li>Threat Intelligence</li> <li>CloudSEK</li> <li>Mandiant</li> <li>SIEM</li> <li>SOC Operations</li> <li>Threat Hunting</li> <li>MITRE ATT&CK</li> <li>Python Scripting</li> <li>PowerShell Automation</li> <li>SOAR</li> <li>WAF Security</li> <li>Cloud Security (AWS/Azure/GCP)</li> <li>OWASP Top 10 / CVE Management</li> </ul>
Collected experience requirement
2-5 years