Senior Vulnerability Management & Incident Response Analyst

Where you’ll work:

Bangalore, KA, IN

IT & Tech Ops at GoTo

GoTo’s IT & Tech Ops team enables a remote-first, high-performance workplace—powered by state-of-the-art AI technology. We’re dedicated to delivering seamless digital experiences that boost productivity and collaboration for every employee worldwide. By harnessing AI, we automate routine tasks, proactively identify solutions, and open new doors for global teamwork and problem-solving. Join our tech innovators and help reimagine the future of work for our teams and customers.

About Security at GoTo

At GoTo, security is at the core of empowering businesses in a 'work anywhere, secure everywhere' world. By embedding security and privacy into our processes by design and by default, we prioritize safeguarding business assets, customer data, and employee information without compromising usability. In a Security Operations role, our focus is on enabling rapid vulnerability identification, effective remediation, responding to incidents, and maintaining organizational resilience in an ever-evolving threat landscape.

Your Day to Day As a Senior Vulnerability Operations and Incident Response Analyst your job responsibilities would be:

- Own the end-to-end vulnerability management lifecycle - discovery, risk-based prioritization, remediation tracking, and verification across cloud, endpoint, network, and application environments.

- Assist in building and maintaining automation for vulnerability scanning, ticketing, SLA tracking, and reporting to reduce manual effort and accelerate remediation velocity.

- Lead the response to zero-day and critical vulnerabilities, coordinating rapid impact assessment, compensating controls, and cross-team remediation under time pressure.

- Manage third-party and supply chain vulnerability risk, including SBOM analysis, and coordinated disclosure handling.

- Support Security Operations Center (SOC) monitoring and incident response investigations as a secondary responsibility, assisting with triage, containment support, and documentation.

- Actively participate in Purple Team exercises with SOC and Offensive Security teams to validate that identified vulnerabilities are properly detected and remediated.

- Champion the adoption of AI and automation within the vulnerability management and Incident Response program to improve scanning coverage, prioritization accuracy, Incident handling and analyst productivity.