Vulnerability Management Lead Job Summary We are seeking an experienced Vulnerability Management Lead with 6–10 years of cybersecurity experience to lead enterprise-wide vulnerability management operations. The role is responsible for driving vulnerability discovery, risk prioritisation, remediation governance, SLA management, executive reporting, and cross-functional coordination with infrastructure, application, IAM, endpoint security, and patch management teams. The ideal candidate will have strong hands-on expertise with Tenable, Rapid7/InsightVM, Tanium, TruOps, and related cybersecurity technologies, along with experience leading teams and supporting global customers.

Key Responsibilities Lead the end-to-end Vulnerability Management programme across servers, endpoints, networks, cloud environments, applications, IAM, and privileged access platforms.

Define and manage vulnerability scanning strategies, authenticated scan coverage, remediation governance, and exception management.

Analyse and validate vulnerability findings from Tenable and Rapid7/InsightVM, prioritising risks based on CVSS, exploitability, asset criticality, and business impact.

Collaborate with infrastructure, patch management, application, endpoint security, and IAM teams to drive timely remediation.

Track remediation SLAs, risk acceptance, and compliance using TruOps or similar GRC platforms.

Partner with patch management teams using Tanium and Automox migration workflows to ensure effective remediation.

Develop and present executive dashboards and reports covering vulnerability trends, ageing, SLA compliance, remediation performance, and asset coverage.

Review identity and privileged access vulnerabilities involving Okta and CyberArk.





Collaborate with endpoint security teams using CrowdStrike and SentinelOne to correlate vulnerability exposure with endpoint risks.

Define and enhance vulnerability management processes, playbooks, operational runbooks, and reporting standards.

Lead weekly and monthly vulnerability review meetings with internal stakeholders and US-based customers.

Mentor Vulnerability Management Engineers and review technical assessments, remediation recommendations, and reporting.

Ensure alignment with security frameworks such as NIST, CIS Controls, ISO 27001, and PCI-DSS.

Requirements Job Requirements Required Skills & Experience 6–10 years of experience in Cybersecurity, Vulnerability Management, Security Operations, or Infrastructure Security.

Minimum 2 years of experience leading teams, coordinating security operations, or managing vulnerability programmes.

Robust hands-on experience with Tenable, Rapid7/InsightVM, Tanium, vulnerability assessment, CVE/CVSS analysis, remediation governance, and SLA management.

Experience in executive reporting, stakeholder management, and customer-facing engagements.

Exposure to TruOps, Cyberfusion, Okta, CyberArk, CrowdStrike, and SentinelOne is highly preferred.

Experience supporting US-based customers and working during US business hours is preferred.

Tools & Technologies Vulnerability Management: Tenable, Rapid7/InsightVM

Patch Management: Tanium, Automox

Risk & GRC: TruOps, Cyberfusion

IAM/PAM: Okta, CyberArk

Endpoint Security: CrowdStrike, SentinelOne

Reporting & Ticketing: Power BI, Excel, ServiceNow, Jira Education & Certifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline (or equivalent experience).

Preferred certifications include CISSP, CISM, CompTIA Security+, CySA+, CEH, GSEC, Tenable, Rapid7, ITIL Foundation, or equivalent industry certifications.

📌 Vulnerability Management Lead (Hyderabad)
🏢 SHI Solutions India
📍 Hyderabad