Senior Analyst – Threat & Vulnerability Management

Career Area: Technology, Digital and Data Job Description: Your Work Shapes the World at Caterpillar Inc. When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it. Your Impact Shapes the World at Caterpillar Inc When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it. Job Summary We are seeking a skilled Senior Analyst – Threat & Vulnerability Management to join Infrastructure Services -CAT IT Division The Senior Vulnerability Management Analyst is responsible for leading the identification, prioritization, tracking, and remediation governance of critical security vulnerabilities across the enterprise. This role serves as a key liaison between cybersecurity, infrastructure, application, and business teams to ensure vulnerabilities are remediated within established SLAs and organizational risk thresholds. The Senior Analyst will leverage ServiceNow Vulnerability Response , security scanning platforms, and advanced reporting capabilities to drive accountability, improve remediation performance, identify systemic risks, and provide executive-level visibility into the organization's security posture. The role requires strong analytical, stakeholder management, and leadership communication skills, along with the ability to influence remediation outcomes across multiple technology teams. The preference for this role is to be based out of Whitefield PSN Office , Bangalore -KA What you will do Vulnerability Management & Remediation Governance • Lead the end-to-end management of critical and high-risk vulnerabilities, ensuring remediation activities align with organizational SLAs and security policies. • Monitor and analyze vulnerability data from ServiceNow Vulnerability Response and vulnerability scanning platforms to identify aged, recurring, and high-impact security risks. • Validate vulnerability records, asset ownership mappings, assignment groups, risk scores, and remediation status. • Drive accountability by assigning, tracking, and escalating remediation activities across infrastructure, cloud, network, application, and endpoint teams. • Evaluate remediation plans, compensating controls, and exception requests to ensure appropriate risk treatment decisions. • Support vulnerability prioritization using CVSS scores, exploitability, threat intelligence, business criticality, and asset context. ServiceNow Administration & Process Optimization • Act as a subject matter expert for ServiceNow Vulnerability Response workflows and reporting. • Develop and maintain dashboards, workflows, reports, and KPIs to improve vulnerability management effectiveness. • Identify process inefficiencies and recommend automation opportunities to enhance tracking, reporting, and remediation activities. • Partner with platform teams to improve vulnerability response processes and governance controls. Stakeholder Management & Collaboration • Engage directly with technical teams, application owners, infrastructure teams, and business stakeholders to obtain remediation commitments and timelines. • Facilitate remediation discussions, risk reviews, and vulnerability governance meetings. • Provide guidance to stakeholders on vulnerability remediation best practices and prioritization strategies. • Escalate SLA breaches, chronic offenders, and unresolved critical vulnerabilities to leadership and risk governance forums. • Mentor junior analysts and provide guidance on vulnerability management processes and cybersecurity best practices. Data Analytics & Risk Reporting • Perform advanced analysis of vulnerability trends, remediation performance, recurring findings, and ownership gaps. • Develop metrics and reporting related to: • SLA compliance • Vulnerability aging • Risk exposure trends • Remediation effectiveness • Business unit performance • Executive risk posture • Create and maintain dashboards using ServiceNow, Excel, Power BI, or similar reporting tools. • Identify systemic issues and strategic improvement opportunities across security and IT operations. Executive Communication & Leadership Reporting • Prepare executive-ready dashboards, scorecards, and presentations for cybersecurity and technology leadership. • Present vulnerability trends, key risks, remediation progress, and strategic recommendations during governance and leadership reviews. • Provide risk-based insights and recommendations to support decision-making and security investment priorities. • Communicate complex technical findings to both technical and non-technical audiences. What you will have • 10–12 years of overall IT and Cybersecurity experience , with at least 5+ years focused on Vulnerability Management, Security Operations, Risk Management, or Cyber Defense functions . • Hands-on experience with ServiceNow Vulnerability Response and/or ITSM platforms. • Strong understanding of vulnerability management lifecycle, risk assessment methodologies, and remediation workflows. • Experience working with enterprise vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or Microsoft Defender Vulnerability Management . • Strong knowledge of: • CVSS scoring • Common vulnerabilities and exposures (CVEs) • Asset criticality • Patch management • Risk and exception management • Advanced proficiency in Excel, Power BI, and PowerPoint. • Experience interacting with senior leadership and presenting cybersecurity metrics and risk posture updates. • Strong analytical, problem-solving, and stakeholder management skills. Preferred Qualifications • Bachelor's degree in Computer Science, Information Security, Information Technology, or related field. • Industry certifications such as: • CISSP • CISM • GSEC • Security+ • CRISC • GIAC Vulnerability Management certifications • Experience with cloud security platforms and cloud-native vulnerability management. • Knowledge of cybersecurity frameworks and standards including: • NIST Cybersecurity Framework • CIS Controls • ISO 27001 • PCI DSS • Experience leading vulnerability governance programs in large enterprise environments. Key Competencies • Strategic Risk Management • Vulnerability Assessment & Prioritization • Executive Stakeholder Management • Cybersecurity Governance • Data Analytics & Reporting • ServiceNow Vulnerability Response • Process Improvement & Automation • Leadership Communication • Cross-functional Collaboration • Mentoring & Team Development Success Measures • Reduction in overdue critical and high-risk vulnerabilities. • Improvement in remediation SLA compliance across business units. • Increased visibility and accountability through executive reporting. • Identification and remediation of systemic vulnerability management gaps. • Enhanced stakeholder engagement and risk governance effectiveness. Skills desired: Core Application Systems : Knowledge of major production application systems used for delivery of services to internal and external clients; ability to leverage major production application systems in diverse situations. Level Extensive Experience: • Manages application-related issues, implications, and approaches with clients. • Evaluates key interfaces and interdependencies among core applications systems.