Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 78 days ago

Vulnerability & Incident Response Analyst

spectris79 open roles

Where
Chennai, IN
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowVulnerability & Incident Response Analystspectris · Chennai, IN

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on spectris's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.9% of postings close within 7 days. Measured by our own scanner across the market. spectris postings stay open a median of 13 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 12.9%7 days
  4. 21.0%14 days
  5. 35.6%30 days
  6. 58.5%60 days
This job: posted 78 days ago

spectris median: 13 days open

The posting

Role Summary

The Vulnerability & Incident Response Analyst will play a key role in supporting HBK's Product Security function by coordinating product vulnerability management activities, security incident reporting obligations, and cross-functional remediation efforts. The role acts as a central liaison between Product Security, Dev SecOps, and Product Teams to ensure vulnerabilities are effectively assessed, tracked, remediated, and reported in accordance with internal policies and regulatory requirements, including the EU Cyber Resilience Act (CRA).

Key Responsibilities

Vulnerability Triage & Analysis

  • Perform initial triage, validation, and analysis of product vulnerabilities identified through vulnerability disclosures, internal testing, security assessments, penetration testing, or automated scanning tools.
  • Assess vulnerability severity using CVSS, exploitability, product applicability, and business impact criteria.
  • Review vulnerability reports and collaborate with product teams to determine applicability, exploitability, and remediation requirements and help to prioritize the vulnerabilities that need to be addressed considering the Risk.
  • Maintain accurate vulnerability records, evidence, and audit trails to support governance and compliance requirements.

Incident & Regulatory Reporting Coordination

  • Support coordination of security incident and exploited vulnerability reporting activities in accordance with applicable regulatory obligations.
  • Prepare and maintain the information required for regulatory notifications, working closely with Product Security, Legal, and Product Teams.
  • Track incident reporting timelines and ensure escalation activities are completed within defined regulatory timeframes.
  • Support incident readiness exercises and reporting process validation activities.

Vulnerability Disclosure & Threat Intelligence Monitoring

  • Monitor vulnerability disclosure channels, PSIRT mailboxes, public vulnerability disclosures, security advisories, and relevant threat intelligence feeds.
  • Identify vulnerabilities and emerging threats that may impact HBK products and coordinate investigations with relevant stakeholders.
  • Track Known Exploited Vulnerabilities (KEVs), industry alerts, and security advisories relevant to HBK products and technologies.
  • Maintain awareness of evolving cybersecurity threats, attacker techniques, and regulatory developments.
  • Prior experience of Bug bounty portals will be an added advantage.

Remediation Coordination & Tracking

  • Coordinate remediation activities with Product Teams, Dev Secops, and Product Security stakeholders.
  • Track vulnerability remediation progress against defined remediation targets and service level objectives.
  • Support review of proposed security updates, patches, and mitigation plans.
  • Produce vulnerability status reports, metrics, and management updates to support governance forums and programme tracking.

Cross-Functional Collaboration

  • Serve as the operational liaison between Product Security, Dev SecOps, Customer Support, Legal, and Product Teams.
  • Facilitate communication and issue resolution across stakeholders involved in vulnerability management and incident response activities.
  • Support the implementation and continual improvement of vulnerability management and coordinated vulnerability disclosure processes.
  • Contribute to regulatory readiness initiatives associated with the EU Cyber Resilience Act and related cybersecurity requirements.

Qualifications

Education

  • Bachelor’s or master’s degree in cyber security, Computer Science, Information Security, Software Engineering, or a related technical discipline.

Required Experience & Skills

  • Experience in vulnerability management, security operations, incident response, PSIRT, application security, or a related cybersecurity discipline.
  • Understanding of vulnerability assessment methodologies, CVSS scoring, exploitability analysis, and remediation workflows.
  • Familiarity with vulnerability management platforms, ticketing systems, and security scanning tools.
  • Knowledge of common vulnerability databases and threat intelligence sources (e.g., CVE, NVD, KEV).
  • Understanding of software development lifecycles and secure development practices.
  • Familiarity with cybersecurity regulations and standards such as EU CRA, ISO/IEC 30111, ISO/IEC 29147, IEC 62443, NIST SP 800 series, or ISO 27001.
  • Strong analytical and problem-solving skills with the ability to prioritise and manage multiple activities simultaneously.
  • Excellent stakeholder management and communication skills, with the ability to work effectively across technical and non-technical teams.
  • Experience preparing security reports, metrics, and compliance evidence is desirable.

Preferred Experience

  • Experience working within a Product Security Incident Response Team (PSIRT).
  • Exposure to regulatory reporting obligations and coordinated vulnerability disclosure programmes.
  • Experience with vulnerability management automation, DevSecOps pipelines (SAST, DAST integration), SBOM tooling, or software composition analysis platforms.
  • Familiarity with cloud, desktop, SaaS, embedded, or industrial control system products.
  • Knowhow on Penetration testing
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against spectris's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on spectris's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    spectris's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.