Job Description
About The Team
The Vulnerability Management team is responsible for the proacƟve idenƟficaƟon, analysis, reporƟng, and coordinaƟon of remediaƟon efforts for security vulnerabiliƟes and risks across the enterprise. We work closely with security, infrastructure, and applicator teams to maintain a strong security posture, ensure compliance with industry frameworks, and reduce the organizaƟon's exposure to threats.Our services are delivered globally, remotely, and 24x7x365, leveraging Global Delivery Network with personnel in India, North America, Europe, and Asia Pacific regions.
Roles & ResponsibiliƟes
Tool & Plaƞorm Management
Configure, upgrade, and opƟmize vulnerability and issue management tools.
Integrate and onboard new systems into the vulnerability and risk management ecosystem.
Liaise with vendors and internal teams for tool support, troubleshooƟng, and feature enhancements.
Perform root cause analysis for recurring issue/posture/reporting gaps.
Policy & Compliance Governance
Define vulnerability management policies, acceptable risk thresholds, and escalaƟon procedures.
Map issues and findings to relevant compliance frameworks such as NIST, MITRE ATT&CK, GDPR.
Facilitate formulaƟon of risk scope cards for leadership review.
Analysis & ReporƟng
Perform root cause analysis for recurring issues, posture gaps, and reporƟng discrepancies.
Plan and conduct key meeƟngs to present issues and findings with their business impact.
Provide periodic execuƟve dashboards summarizing security posture, vulnerabiliƟes, and strategic
recommendaƟons.
CollaboraƟon & Leadership Support
Coordinate closely with Product Owners, Risk Owners, and cross-funcƟonal teams to ensure Ɵmely
remediaƟon.
Drive strategic iniƟaƟves to improve vulnerability lifecycle management and reporƟng accuracy.
Tools & Technologies
Vulnerability Management Tools: MicrosoŌ Defender, Wiz, Reco, ServiceNow Vulnerability Response
(SNOW VR).
Preferred: Hands on experience in performing VAPT and understanding of frameworks like NIST, FAIR.
Preferred Skills & Experience
Hands-on experience in Vulnerability Assessment and PenetraƟon TesƟng (VAPT).
Strong understanding of frameworks such as NIST, FAIR, and MITRE ATT&CK.
Proven ability to translate technical findings into business impact for execuƟve audiences.
QualificaƟons
EducaƟon
B.E./B.Tech/Graduate in Computer Science, InformaƟon Security, or related field.
Minimum 6-8 years of experience in vulnerability management, security operaƟons, or risk governance, with at least 2-3 years in a senior or L3 capacity.
ExperƟse in configuring and integraƟng enterprise security tools.
Strong analyƟcal skills and ability to perform root cause analysis.
Excellent communicaƟon and presentaƟon skills, especially for execuƟve stakeholders.
