Sr. Engineer - Cybersecurity N 4B

Sr. Engineer - Cybersecurity N

At Genpact, we don't just adapt to change, we lead it. AI and digital innovation are transforming the way businesses work, and we're at the forefront of it. Genpact's AI Gigafactory , our industry-first accelerator, exemplifies how we scale advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. Whether tackling complex challenges through large-scale models or agentic AI , our breakthrough solutions tackle companies' most complex challenges. If you thrive in a fast-moving, innovation-driven environment, love building and deploying cutting-edge AI solutions, and want to push the boundaries of what's possible, this is your moment. Genpact (NYSE: G) is an agentic and advanced technology solutions company. We leverage process intelligence and artificial intelligence to deliver measurable outcomes. With a strong partner ecosystem and decades of client trust, we provide innovative solutions that transform how businesses run. Powered by a team with an active learning mindset and client centricity at its core, we deliver lasting value for the world's leading enterprises. Get to know us at genpact.com and on LinkedIn , YouTube , X , and Facebook .

Position: Security Analyst - TVM Operations The Senior Security Analyst (TVM Operations) ensures the organization maintains a comprehensive and real-time view of its security posture. This operational role manages the daily execution of the Qualys platform, utilizing VMDR, CSAM, and EASM to detect vulnerabilities, discover unmanaged assets, and monitor our external attack surface. You will not be patching systems yourself; rather, you will be the "source of truth" for partner teams. Your goal is to deliver accurate, actionable data into Jira, collaborate with System Administrators to prioritize fixes, and validate that remediation has occurred. •

You enjoy the rhythm of daily operations - ensuring scans run, agents report, and data flows correctly. •

You are vigilant about the External Attack Surface (EASM), spotting exposed services or forgotten subdomains before adversaries do. •

Since you do not apply the patches, you rely on building strong relationships with IT partner teams to drive remediation action. •

You understand that a Vulnerability Management program is only as good as its asset inventory (CSAM), and you relentlessly chase down "unknown" assets. •

You are comfortable working in Jira, ensuring that security findings don't get lost in the backlog. ·

Manage the daily health of the Qualys subscription, specifically

(Vulnerability Management),

(CyberSecurity Asset Management), and

(External Attack Surface Management). ·

continuously monitor the network for unmanaged devices and unauthorized software. Work with IT to install agents or decommission shadow IT. ·

Monitor the organization's external footprint. Identify and alert on unexpected public-facing assets, open ports, or expired certificates. ·

Translate scan findings into actionable

tickets. Assign tasks to appropriate partner teams (Server, Network, Cloud) and participate in sprint planning/backlog reviews to advocate for security tasks. ·

Execute validation scans (re-scans) once partner teams mark Jira tickets as "Resolved" to confirm the vulnerability is truly closed. ·

Configure and schedule discovery and vulnerability scans. Manage scanner appliances and exclude lists to prevent operational disruption. ·

Review technical evidence provided by partner teams to validate "False Positive" or "Risk Acceptance" requests. ·

Generate weekly operational reports on "Open Vulnerabilities vs. Closed," Remediation SLAs, and Agent Health. ·

Troubleshoot Qualys Cloud Agents on endpoints that have stopped reporting or are failing to authenticate. ·

When high-profile vulnerabilities (e.g., Log4j, HTTP/2 Rapid Reset) are announced, use VMDR and CSAM to provide immediate impact assessments to leadership. •

in information security, computer science, or equivalent operational experience. •

Proven operational experience with

(running scans, analyzing results). •

Experience using

or similar tools to reconcile asset inventories and identify "blind spots" in coverage. •

Experience with

concepts - understanding DNS, public IP ranges, and how to identify assets that shouldn't be on the internet. •

Strong working knowledge of

for ticket management. Ability to use

(Jira Query Language) to search for issues and create dashboards. •

A track record of successfully working with System Administrators and DevOps teams. You know how to "speak their language" to get patches prioritized. •

Sufficient knowledge of Windows, Linux, and Networking to help partner teams understand where a vulnerability is located and why it needs fixing. •

Ability to diagnose why a scanner can't reach a host or why an agent is offline. •

Ability to correlate an external finding (EASM) with an internal vulnerability (VMDR) to determine true risk.

·

in CSAM or VMDR. ·

Cloud (AWS/Azure) asset discovery and vulnerability/misconfiguration remediation. ·

risk-based prioritization (focusing on what is exploitable vs. just high severity). Qualifications Bachelors - Computer Science, Bachelors - Cybersecurity, Bachelors - Information Systems, Bachelors - Information Technology, Masters - Computer Science

Certified Information Systems Security Professional (CISSP) - Workforce Academy OnlineWorkforce Academy Online

Agile Methodology, Application Security, Best Practice Benchmarking, Client Relations, Cloud IAM, Collaboration Tools, Cyber Resilience Management, Design Thinking, Executive Presence, Forensics, Identity Access Management (IAM), Inclusion, Metrics Reporting, Personal Effectiveness, Security Architecture Design, Security Framework, Security Policies, Security Standards, Storytelling

English

Proficient - C2

Regular

Cybersecurity N

Hybrid

Flex Time (India)

- Drive innovation and solve real-world business challenges that matter

- Help global enterprises solve business challenges that matter

- Gain hands-on experience, mentorship, and world-class learning opportunities to stay ahead

- Join 140,000+ bold thinkers and problem-solvers who push boundaries every day

- Our courage, curiosity, and incisiveness - built on a foundation of integrity and inclusion - allow your ideas to fuel progress Come join the 140,000+ coders, tech shapers, and growth makers at Genpact and take your career in the only direction that matters: Up. Let's build tomorrow together. Genpact is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. Genpact is committed to creating a dynamic work environment that values respect and integrity, customer focus, and innovation. Furthermore, please do note that Genpact does not charge fees to process job applications and applicants are not required to pay to participate in our hiring process in any other way. Examples of such scams include purchasing a 'starter kit,' paying to apply, or purchasing equipment or training.