[Hiring] Information Security Analyst @Energy Exemplar

Role Description

We are seeking an enthusiastic Information Security Analyst to support Energy Exemplar's Vulnerability Management Program. The primary responsibility of this role is to coordinate and manage vulnerability assessment and penetration testing (VAPT) activities across our cloud, on-premises, and corporate environments. The successful candidate will work closely with internal technology teams, product engineering, cloud operations, IT infrastructure teams, and external VAPT partners to ensure vulnerabilities are identified, assessed, prioritized, tracked, and remediated in accordance with Energy Exemplar's vulnerability management standards and remediation SLAs. The role will also provide operational support for security monitoring activities and gain exposure to SIEM technologies and security operations.

Key Responsibilities

• Coordinate internal and external Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Perform authenticated and unauthenticated vulnerability scans using enterprise vulnerability management tools.
• Review, validate, triage, and prioritize vulnerabilities based on CVSS, exploitability, business impact, and organizational risk.
• Track vulnerabilities through remediation and verify closure.
• Monitor compliance with vulnerability remediation SLAs and escalate overdue findings.
• Work with Product Engineering, Cloud Operations, Infrastructure, IT, and DevOps teams to ensure timely remediation.
• Coordinate with external penetration testing vendors for scheduled assessments and remediation validation.
• Prepare vulnerability reports, dashboards, metrics, and executive summaries.
• Support monthly and quarterly reporting on vulnerability trends, MTTR, backlog, SLA compliance, and remediation effectiveness.
• Assist in maintaining vulnerability management processes, standards, and documentation.
• Support security audits including ISO 27001, SOC 2, and customer security assessments by providing evidence related to vulnerability management.
• Assist in monitoring security events using SIEM platforms and investigate security alerts under the guidance of senior security personnel.
• Participate in continuous improvement initiatives to enhance Energy Exemplar's security posture.

Qualifications

• Experience in Vulnerability Assessment and Penetration Testing (VAPT).
• Basic understanding of network, operating system, and web application security.
• Familiarity with common vulnerabilities such as those listed in the OWASP Top 10 and Common Weakness Enumeration (CWE).
• Understanding of CVSS scoring and vulnerability prioritization.
• Exposure to vulnerability management tools such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar platforms.
• Basic understanding of cloud security concepts (Azure preferred).
• Exposure to SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or Microsoft Defender XDR.
• Familiarity with Windows and Linux operating systems.
• Good analytical and problem-solving skills.
• Strong written and verbal communication skills.

Preferred Qualifications

• 2-4 years of experience in the field of Vulnerability Management.
• Familiarity with the unique cybersecurity challenges associated with cloud-based energy market applications is a plus.
• Bachelor's degree in Computer Science, Information Security, or a related discipline.
• Relevant certifications such as CISSP, CEH (or currently pursuing) are desirable.
• Exposure to scripting using PowerShell or Python is an advantage.
• Knowledge of ISO 27001, SOC 2, NIST CSF, or CIS Controls is desirable.

Key Competencies

• Strong attention to detail.
• Ability to coordinate with multiple stakeholders.
• Good organizational and time management skills.
• Ability to manage multiple remediation activities simultaneously.
• Willingness to learn new security technologies.
• Team player with a proactive mindset.

Company Description

Energy Exemplar is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. We welcome applications from people of all backgrounds, experiences, identities, and abilities. Please let us know if you require accommodations at any stage of the recruitment process—we're here to support you in showcasing your full potential.

Energy Exemplar respects your privacy and is committed to protecting the personal data you share during the recruitment process.