Architect, Cybersecurity

This is a hybrid opportunity in Delhi NCR, Bangalore, Hyderabad, Gurugram area.

Shifts:

7:00 PM IST- 4:00 AM IST

14,000+ engaged teammates globally with operations in 25 countries across the globe. Received 35+ industry and partner awards in the past year $9.2 billion in revenue #20 on Fortune’s World'sBest Workplaces™ list #14 on Forbes World's Best Employers in IT – 2023 #23 on Forbes Best Employers for Women in IT- 2023 $ 1.4M+ total charitable contributions in 2023 by Insight globally

The Lead Attack Surface Analyst is a player-coach who blends hands-on delivery with day-to-day leadership of the Attack Surface Support Analyst team. In addition to performing a subset of analyst responsibilities — operating vulnerability management tooling, validating exposures, and overseeing agentic remediation workflows — the Lead is accountable for the quality, consistency, and continuous improvement of Insight’s CTEM & CPEN service.

As the program evolves, the Lead refines roles, processes, automation, and client deliverables based on operational learnings, ensuring the service scales and matures while sustaining high client satisfaction and SLA performance.

• Provide daily direction and work prioritization for the Attack Surface Support Analyst team, balancing workload across active engagements.
• Mentor and develop analysts through coaching, quality reviews, and performance feedback in partnership with management.
• Serve as the primary escalation point for complex findings, contested risk acceptances, and client concerns.
• Monitor delivery quality and SLA adherence across the client portfolio and report status to practice leadership.

• Perform analyst-level work as needed — operate Qualys and related tooling, validate high-risk exposures, and drive prioritization on the most critical or sensitive engagements.
• Govern automated and agentic workflows for validation, prioritization, and remediation dispatch, maintaining human-in-the-loop oversight and appropriate confidence thresholds.
• Partner with Managed Infrastructure Services on remediation strategy, compensating controls, and verification of closure.

• Refine and enhance the CTEM & CPEN roles runbooks, and operating procedures based on learnings as the programs evolve.
• Tune detection content and automation including prioritization logic, orchestration playbooks, and agentic decision frameworks.
• Define and track service KPIs identify efficiency and maturity opportunities, and lead their implementation.
• Standardize onboarding, reporting templates, and proof-of-execution artifacts across the client portfolio.

• Lead complex or strategic client onboardings and support onboarding of all new CTEM & CPEN clients.
• Represent the service in exposure reviews, QBRs, and escalations communicating risk posture and remediation strategy to technical and executive stakeholders.
• Collaborate with sales engineering and practice leadership on scoping, service evolution, and client expansion.

• 9-12+ years in vulnerability management, security operations, penetration testing, or related cybersecurity disciplines, including 1–2+ years of team lead, mentorship, or people-management responsibility.
• Advanced, hands-on expertise with Qualys (VMDR/Tru Risk) or an equivalent enterprise VM platform, including administration and tuning.
• Demonstrated experience designing or refining vulnerability/exposure management processes, SLAs, and runbooks.
• Strong command of CTEM frameworks, risk-based prioritization (CVSS/EPSS/asset criticality), and the end-to-end remediation lifecycle.
• Experience overseeing…