Information Security - Associate L1/L2

About the Company:

Publicis Re:Sources is at the core of Publicis Groupe, the world's largest communications company. We are the only full-service, end-to-end shared service organization in the industry, enabling Groupe agencies to do what they do best: innovate and transform for their clients.

Formed in 1998 as a small team to service a few Publicis Groupe firms, Publicis Re:Sources has grown to 6,000+ employees in over 55 countries. We provide technology solutions and business services, including finance, accounting, legal, benefits, procurement, tax, real estate, treasury and risk management, information security, and global mobility — supporting 110,000+ employees across the Publicis Groupe network. Our people are at the center of everything we do, bringing curiosity, collaboration, and a commitment to excellence to their work every day.

Learn more about Publicis Re:Sources and the Publicis Groupe agencies we support at publicisresources.com.

JOB SUMMARY:

Candidate is responsible for day-to-day Vulnerability Management Operations, including reviewing, analyzing, tracking, and coordinating the remediation of security vulnerabilities identified through vulnerability assessments, penetration tests, and security scanning activities. The role requires collaboration with asset owners, infrastructure teams, and security stakeholders to drive timely remediation, manage risk exceptions, and improve the organization's security posture. Candidate should possess a solid understanding of enterprise IT infrastructure, cloud technologies, cybersecurity fundamentals, and emerging AI concepts and their associated security risks.

Key Responsibilities

• Review, analyze, and validate vulnerability findings from security assessment tools.

• Coordinate vulnerability remediation efforts with asset owners and technical teams.

• Track remediation progress and ensure timely closure of findings in accordance with security policies.

• Assess vulnerability severity, business impact, exploitability, and remediation requirements.

• Support risk acceptance and exception management processes

• Assist with vulnerability reporting, metrics, dashboards, and operational tracking.

• Automate repetitive tasks and improve operational efficiency using Python, PowerShell, Bash, or similar scripting languages.

• Understand and maintain SQL queries for reporting and analysis.

• Provide guidance and awareness to stakeholders on vulnerabilities, security risks, and remediation best practices.

• Build strong working relationships with IT, Security, and business stakeholders.

Location: Gurgaon/Bangalore/Pune

Technical Skills Required:

• Experience administering Windows and Linux operating systems.

• Proficiency in Python, PowerShell, Bash, or similar scripting languages.

• Strong SQL query development and troubleshooting skills. (Understand of SQL queries)

• Vulnerability and Patch Management

• Common Vulnerabilities and Exposures (CVEs)

• Authentication and Authorization

• Fundamental Network skills covering OSI layer, TLS handshake, cipher suite, DNS look up etc.

• Firewalls, VPNs, Proxies, IDS/IPS, Antivirus, and SIEM technologies

• Encryption, TLS/SSL, and cryptographic concepts

• Cloud infrastructure concepts across AWS, Azure, or GCP

• Proficiency with Microsoft Excel, Word, PowerPoint

Preferred

• Experience with vulnerability management and security assessment tools such as Rapid7 or InsightVM/Nexpose, Nessus, Metasploit, and Kali Linux.

• Exposure to cloud security platforms and technologies.

• Knowledge of any Security Ratings platforms and EASM tools.

• Exposure to enterprise and cloud security environments.

Soft Skills

• Strong analytical and problem-solving abilities.

• Excellent written and verbal communication skills.

• Detail-oriented with strong organizational skills.

• Ability to effectively engage and influence technical and non-technical stakeholders.

• Self-motivated with a continuous learning mindset.

Preferred Qualifications

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related field.

• Minimum 3+ years of experience in Cyber Security, Vulnerability Management, Security Operations, Infrastructure Security, or a related discipline.

• Security certifications such as Security+, CEH, CySA+, or equivalent are an advantage.