Job Title

Vulnerability Management (VM) Engineer

Role Summary

The VM Engineer is responsible for identifying, analyzing, prioritizing, and driving remediation of vulnerabilities and security exposures across enterprise environments, leveraging risk-based approaches to reduce overall attack surface.

Key Responsibilities

Vulnerability & Exposure Management :

Perform and manage vulnerability scanning across infrastructure, endpoints, applications, and cloud environments
Analyze findings and prioritize remediation based on risk, exploitability, and business impact
Drive vulnerability lifecycle: discovery, validation, remediation, closure
Correlate vulnerabilities with threat intelligence and exposure context (CTEM approach)

Tooling & Platform Management

Configure and manage exposure management tools (Tenable One, Tenable.io/sc, Qualys, Rapid7)
Integrate VM tools with Tanium, ServiceNow CMDB, SIEM, and asset management platforms
Support API integration and automation of scanning, ticketing, and reporting workflows

Remediation & Risk Reduction

Partner with infrastructure,



application, and cloud teams to drive remediation activities
Implement compensating controls where patching is not immediately feasible
Support patch management and configuration hardening initiatives

Data Analysis & Reporting

Develop risk-based dashboards and reports (exposure trends, SLA adherence, coverage)
Identify recurring vulnerabilities and root causes
Provide insights to support prioritization and decision-making

Governance & Continuous Improvement

Support audit, compliance, and regulatory requirements (NIST, CIS, SOX, etc.)
Improve vulnerability prioritization using risk scoring, asset criticality, and exploit data
Enhance automation, coverage, and program maturity aligned to CTEM framework

Required Skills & Experience

Robust experience in vulnerability management and exposure management lifecycle
Hands-on expertise with Tenable (preferred), Qualys, or Rapid7
Knowledge of CVEs,

📌 Estuate - Vulnerability Management Engineer - SIEM Tools (Kolkata)
🏢 Estuate
📍 Kolkata