Information Security Incident Analyst - Bengaluru

Overview

Own end-to-end coordination of externally reported and actively exploited product vulnerabilities and high-severity product security incidents for Omnissa's on-premises and SaaS products, while designing and governing AI-assisted vulnerability operations.

What you'll do

• Own end-to-end coordination of externally reported and actively exploited product vulnerabilities, from intake and triage through remediation, coordinated disclosure, and customer communication, for on-premises and SaaS products.
• Act as incident coordinator for high-severity product security events: set severity, run the bridge, assign owners, track timelines, and drive decisions with Engineering, Product, Support, Legal, and Communications.
• Coordinate security engineers and external stakeholders (researchers, CERTs, vendors, customers, coordinators) to remediate high-profile vulnerabilities within tight timeframes.
• Run coordinated disclosure, including embargo management, CVE assignment, advisory publication, and researcher relations.
• Perform RCCA and post-incident reviews, and present findings and trends to executive staff.
• Design, deploy, and govern AI-assisted workflows for intake deduplication, triage, exploitability and impact analysis, severity scoring, and advisory drafting, with human review at decision points.
• Evaluate and operationalize AI-enabled tooling and automation to raise speed and scale while managing accuracy, hallucination, data handling, and tenant-isolation risks.
• Triage and respond to the rising volume of AI-generated vulnerability reports, including low-quality submissions, and to AI-accelerated exploitation that shortens the time from disclosure to attack.
• Assess and coordinate response to vulnerabilities in AI features and components shipped in Omnissa products (for example prompt injection, model and agent integrations, and AI supply chain dependencies).
• Define metrics for AI-assisted operations: time to triage, time to remediate, false positive rate, and report quality.
• Build and maintain process, policy, and runbook documentation; identify and implement team improvements.
• Define and report program roadmap, status, and success metrics (SLAs, backlog, aging, disclosure timelines).
• Support regulatory and customer obligations tied to vulnerability handling and disclosure (for example EU Cyber Resilience Act reporting, CNA responsibilities, customer and audit inquiries).
• Answer customer and field "am I impacted by CVE X" inquiries using SBOM, scanner, and threat intelligence data.
• Monitor threat intelligence, exploit activity, and KEV-class signals to maintain situational awareness and drive prioritization.
• Engage the security community: researchers, bug bounty participants, vendors, and conferences.
• Work with stakeholders from engineering to executive level.

What you'll need

• 6 to 12 years in product security, PSIRT, vulnerability response, or security incident response, including coordination of multi-team remediation under time pressure.
• Hands-on experience running or coordinating security incidents and vulnerability disclosures end to end.
• Working knowledge of CVSS, CWE, CVE/CNA processes, VEX, SBOM, and ISO/IEC 29147 and 30111 concepts.
• Ability to investigate vulnerabilities and exploits and understand common classes (OWASP Top 10, CWE Top 25).
• Practical experience using AI tooling in security operations workflows, with sound judgment on validation and data protection.
• Ability to translate business objectives into execution strategy and prioritize in a dynamic environment.
• Excellent written and verbal communication, including executive briefings.
• Self-motivated and effective across functional teams.
• Bachelor's degree in computer science, information systems, risk management, or a similar field strongly preferred.

Nice to have

• Prior software engineering or architecture experience, including secure coding practices.
• Scripting or automation skills (Python, APIs, Jira/Confluence automation) to build workflows.
• Experience with SAST, SCA, and vulnerability scanners, and code platforms (GitHub, GitLab, Bitbucket).
• Experience with bug bounty or vulnerability disclosure programs.
• Customer-facing experience.
• Experience with Jira Service Management and Confluence.
• Relevant certifications (for example FIRST PSIRT Services Framework training, GCIH, GCFA, CISSP) are a plus.

Details

• Location: Bengaluru, India.