Senior Analyst – Threat & Vulnerability Management

Beschrijving

Career Area:

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Your Impact Shapes the World at Caterpillar Inc

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Job Summary

We are seeking a skilled Senior Analyst – Threat & Vulnerability Management

to join Infrastructure Services -CAT IT Division

The Senior Vulnerability Management Analyst is responsible for leading the identification, prioritization, tracking, and remediation governance of critical security vulnerabilities across the enterprise. This role serves as a key liaison between cybersecurity, infrastructure, application, and business teams to ensure vulnerabilities are remediated within established SLAs and organizational risk thresholds.

The Senior Analyst will leverage ServiceNow Vulnerability Response, security scanning platforms, and advanced reporting capabilities to drive accountability, improve remediation performance, identify systemic risks, and provide executive-level visibility into the organization's security posture. The role requires strong analytical, stakeholder management, and leadership communication skills, along with the ability to influence remediation outcomes across multiple technology teams.

The preference for this role is to be based out of Whitefield PSN Office , Bangalore -KA

What you will do

Vulnerability Management & Remediation Governance

• Lead the end-to-end management of critical and high-risk vulnerabilities, ensuring remediation activities align with organizational SLAs and security policies.
• Monitor and analyze vulnerability data from ServiceNow Vulnerability Response and vulnerability scanning platforms to identify aged, recurring, and high-impact security risks.
• Validate vulnerability records, asset ownership mappings, assignment groups, risk scores, and remediation status.
• Drive accountability by assigning, tracking, and escalating remediation activities across infrastructure, cloud, network, application, and endpoint teams.
• Evaluate remediation plans, compensating controls, and exception requests to ensure appropriate risk treatment decisions.
• Support vulnerability prioritization using CVSS scores, exploitability, threat intelligence, business criticality, and asset context.

ServiceNow Administration & Process Optimization

• Act as a subject matter expert for ServiceNow Vulnerability Response workflows and reporting.
• Develop and maintain dashboards, workflows, reports, and KPIs to improve vulnerability management effectiveness.
• Identify process inefficiencies and recommend automation opportunities to enhance tracking, reporting, and remediation activities.
• Partner with platform teams to improve vulnerability response processes and governance controls.

Stakeholder Management & Collaboration

• Engage directly with technical teams, application owners, infrastructure teams, and business stakeholders to obtain remediation commitments and timelines.
• Facilitate remediation discussions, risk reviews, and vulnerability governance meetings.
• Provide guidance to stakeholders on vulnerability remediation best practices and prioritization strategies.
• Escalate SLA breaches, chronic offenders, and unresolved critical vulnerabilities to leadership and risk governance forums.
• Mentor junior analysts and provide guidance on vulnerability management processes and cybersecurity best practices.

Data Analytics & Risk Reporting

• Perform advanced analysis of vulnerability trends, remediation performance, recurring findings, and ownership gaps.
• Develop metrics and reporting related to:
  • SLA compliance
  • Vulnerability aging
  • Risk exposure trends
  • Remediation effectiveness
  • Business unit performance
  • Executive risk posture
• Create and maintain dashboards using ServiceNow, Excel, Power BI, or similar reporting tools.
• Identify systemic issues and strategic improvement opportunities across security and IT operations.

Executive Communication & Leadership Reporting

• Prepare executive-ready dashboards, scorecards, and presentations for cybersecurity and technology leadership.
• Present vulnerability trends, key risks, remediation progress, and strategic recommendations during governance and leadership reviews.
• Provide risk-based insights and recommendations to support decision-making and security investment priorities.
• Communicate complex technical findings to both technical and non-technical audiences.

What you will have

• 10–12 years of overall IT and Cybersecurity experience, with at least 5+ years focused on Vulnerability Management, Security Operations, Risk Management, or Cyber Defense functions.
• Hands-on experience with ServiceNow Vulnerability Response and/or ITSM platforms.
• Strong understanding of vulnerability management lifecycle, risk assessment methodologies, and remediation workflows.
• Experience working with enterprise vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or Microsoft Defender Vulnerability Management.
• Strong knowledge of:
  • CVSS scoring
  • Common vulnerabilities and exposures (CVEs)
  • Asset criticality
  • Patch management
  • Risk and exception management
• Advanced proficiency in Excel, Power BI, and PowerPoint.
• Experience interacting with senior leadership and presenting cybersecurity metrics and risk posture updates.
• Strong analytical, problem-solving, and stakeholder management skills.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field.
• Industry certifications such as:
  • CISSP
  • CISM
  • GSEC
  • Security+
  • CRISC
  • GIAC Vulnerability Management certifications
• Experience with cloud security platforms and cloud-native vulnerability management.
• Knowledge of cybersecurity frameworks and standards including:
  • NIST Cybersecurity Framework
  • CIS Controls
  • ISO 27001
  • PCI DSS
• Experience leading vulnerability governance programs in large enterprise environments.

Key Competencies

• Strategic Risk Management
• Vulnerability Assessment & Prioritization
• Executive Stakeholder Management
• Cybersecurity Governance
• Data Analytics & Reporting
• ServiceNow Vulnerability Response
• Process Improvement & Automation
• Leadership Communication
• Cross-functional Collaboration
• Mentoring & Team Development

Success Measures

• Reduction in overdue critical and high-risk vulnerabilities.
• Improvement in remediation SLA compliance across business units.
• Increased visibility and accountability through executive reporting.
• Identification and remediation of systemic vulnerability management gaps.
• Enhanced stakeholder engagement and risk governance effectiveness.

Skills desired:

Core Application Systems: Knowledge of major production application systems used for delivery of services to internal and external clients; ability to leverage major production application systems in diverse situations.
Level Extensive Experience:
• Manages application-related issues, implications, and approaches with clients.
• Evaluates key interfaces and interdependencies among core applications systems.
• Explains features and benefits of core applications for consideration by business units.
• Implements existing and planned application enhancements in major business units.
• Tracks data flow between own applications and core applications in other business areas.
• Plans enhancement, conversion, and retirement strategies for core applications.

Problem Solving: Knowledge of approaches, tools, techniques for recognizing, anticipating, and resolving organizational, operational or process problems; ability to apply knowledge of problem solving appropriately to diverse situations.
Level Extensive Experience:
• Ensures capture of lessons to be learned from a problem-solving effort.
• Organizes potential problem solvers and leads problem resolution efforts.
• Uses varying problem-solving approaches and techniques as appropriate.
• Contributes to standard practices for problem-solving approaches, tools, and processes.
• Analyzes and synthesizes information and devises alternative resolution strategies.
• Develops successful resolutions to critical or wide-impact problems.

Application Design, Architecture: Knowledge of application design and architecture principles and practices; ability to utilize application design methodologies, tools, and techniques to convert business requirements and logical models into a technical application design.
Level Extensive Experience:
• Analyzes system requirements and translates them into detailed design specifications.
• Designs complex application architectures that meet performance, scalability, and reliability requirements.
• Evaluates and selects appropriate pattern, components, technologies, and tools for application development; integrates them with technical design.
• Leads application design reviews and walkthroughs to ensure alignment between business requirements and technical solution.
• Troubleshoots complex design issues and provides innovative solutions.
• Prepares technical design documents and blueprints for applications.
Implementation: Knowledge of how to run applications for organizations; ability to implement application software within an organization and help end-users perform specific tasks (ex: accounting or graphic design).
Level Working Knowledge:
• Tracks problems associated with the quality and effectiveness of application software.
• Researches the benefits and drawbacks of an organization's application software.
• Drafts application software usage for the department's needs.
• Provides instant support for end users of application software.
• Implements a specific application software under the supervision of management.

Requirements Analysis: Knowledge of tools, methods, and techniques of requirement analysis; ability to elicit, analyze and record required business functionality and non-functionality requirements to ensure the success of a system or software development project.
Level Extensive Experience:
• Plays an active or leading role in recording and storing requirement documents in various forms.
• Ensures the successful completion of all major activities, tasks and deliverables pertaining to the requirement analysis stage.
• Supervises the advanced use of requirements analysis tools and services, including prototyping and use cases.
• Produces detailed functional and information requirements models and documentation.
• Trains others on requirements walkthroughs and quality reviews.
• Utilizes automated diagramming tools to ensure traceability of requirements.

System and Technology Integration: Knowledge of the features and facilities of systems; ability to integrate and communicate among applications, databases and technology platforms.
Level Extensive Experience:
• Designs and develops applications or technology interfaces and bridges.
• Documents existing best practices for system or technology integration processes.
• Identifies and quantifies risks of proposed alternatives to a system or technology integration initiative.
• Delivers training on major issues, interfaces, considerations and potential pitfalls and risks.
• Discusses with line areas on data, technology and application integration issues.
• Advises others in how to integrate projects across multiple technologies.

System Testing: Knowledge of system and software testing; ability to design, plan and execute system testing strategies and tactics to ensure the quality of software at all stages of the system life cycle.
Level Extensive Experience:
• Verifies the proper flow of transactions across all input, output and storage channels or devices.
• Evaluates interoperability of new systems with existing systems during the beta testing phase.
• Supervises the testing of complex, multi-platform and distributed applications.
• Designs processes to ensure that the system meets and maintains requirements and expectations.
• Coaches end users on the development of test data and test scenarios for system validation.
• Manages the execution of test plans, including resources, strategies, schedules, processes and tools.

Technical Troubleshooting: Knowledge of technical troubleshooting approaches, tools and techniques; ability to anticipate, recognize, and resolve technical issues on hardware, software, application or operation.
Level Working Knowledge:
• Discovers, analyzes, and resolves hardware, software or application problems.
• Works with vendor-specific diagnostic guides, tools and utilities.
• Handles calls related to product features, applications, and compatibility standards.
• Analyzes code, logs, and current systems as part of advanced troubleshooting.
• Records and reports specific technical problems, solving processes and tools that have been used.

What you will get:

• Work Life Harmony
• Earned and medical leave.
• Relocation assistance

Holistic Development

• Personal and professional development through Caterpillar ‘s employee resource groups across the globe
• Career developments opportunities with global prospects

Health and Wellness

• Medical coverage -Medical, life and personal accident coverage
• Employee mental wellness assistance program

Financial Wellness

• Employee investment plan
• Pay for performance -Annual incentive Bonus plan.

Additional Information:

Caterpillar is not currently hiring individuals for this position who now or in the future require sponsorship for employment visa status; however, as a global company, Caterpillar offers many job opportunities outside of the U.S. which can be found through our employment website at www.caterpillar.com/careers

Posting Dates:

Caterpillar is an Equal Opportunity Employer. Qualified applicants of any age are encouraged to apply

Not ready to apply? Join our Talent Community.