Enterprise Vulnerability Management Lead/Specialist

• Experience in cybersecurity, focusing specifically on vulnerability management, security operations, or infrastructure security
• Lead and manage enterprise-wide vulnerability management activities.
• Establish vulnerability management policies, standards, and operating procedures.
• Drive continuous improvement of the vulnerability management framework.
• Define KPIs, KRIs, SLAs, and remediation targets.
• Conduct and coordinate vulnerability assessments across Servers and Workstations, Network Devices, Cloud Platforms (AWS, Azure, GCP) and web applications
• Track remediation activities and ensure SLA adherence.
• Validate fixes and perform re-scans.
• Escalate critical and overdue vulnerabilities to stakeholders.
• Work on Threat & Exposure Management like Monitor security advisories, zero-day vulnerabilities, and emerging threats.
• Work on Security Reporting & Metrics like Produce executive dashboards and operational reports, provide regular vulnerability posture updates to leadership
• Work on Compliance and Risk Management, Stake holder Management
• Work on Automation & Continuous Improvement
• Should have technical skills on

·        Vulnerability Management Platforms like Qualys VMDR, CrowdStrike Spotlight etc.

·        Application security SAST, DAST, OWASP Top 10, Secure SDLC

·        Cloud Security like Microsoft Azure Security/ AWS Security/ Google Cloud Security etc.

·        Security Technologies like SIEM (Microsoft Sentinel, Splunk, QRadar), Endpoint Security etc.

·        Operating Systems & Infrastructure like Windows, Linux/Unix, Active Directory and Network security

·        Automation & Scripting using PowerShell, Python, Shell Scripting, REST APIs