Job Description: Infrastructure Engineer responsible for end-to-end vulnerability management across business solutions infrastructure, ensuring accurate asset inventory (CMDB), proper reporting, vulnerability assignment, timely remediation, and measurable risk reduction

Responsibilities: Vulnerability Management Operations

- Own lifecycle of vulnerabilities from detection through remediation and validation

- Analyze vulnerability scan outputs and prioritize remediation

- Ensure vulnerabilities are assigned and tracked to closure

- Drive SLA adherence across severity levels

- Coordinate remediation with InfraSec and asset owners

- enhance and improve current process

- work with application owners to help them remediate application related vulnerabilities

CMDB & Asset Inventory Management

- Maintain accurate CMDB and asset inventory (servers, cloud, application ownership)``

- Validate scan coverage against CMDB and identify gaps

- Improve asset-to-owner mapping for accountability

Remediation Tracking & Coordination

- Drive weekly/monthly remediation tracking cycles

- Coordinate between application owners, infra teams, and security

- Escalate overdue vulnerabilities and track progress

Ticketing & Workflow Management

- Create and manage remediation tickets (ServiceNow/Jira)

- Ensure proper categorization, SLA tracking,



and audit trail

- Automate routing and assignment where possible

Rescanning & Validation

- Execute post-remediation rescans to validate closure

- Track false positives and exceptions with approvals

- Maintain audit-ready evidence

Reporting & Metrics

- Produce dashboards: open vulnerabilities, SLA compliance, MTTR, aged findings

- Publish executive summaries and operational reports

- Identify trends and systemic issues

Process & Automation Improvement

- Identify opportunities to automate remediation workflows

- Support patch automation and standardized remediation patterns

Qualifications: Qualifications

- 3-5+ years experience in vulnerability management or infrastructure engineering

- Experience with tools like Qualys,

- Robust understanding of OS patching, cloud infrastructure, and application vulnerabilities

- Experience with CMDB systems and ticketing tools (ServiceNow/Jira)

- Knowledge of CVE, CVSS scoring and prioritization

Nice to Have

- Scripting (Python, PowerShell)

- SOAR/automation tools

- Familiarity with compliance frameworks (HITRUST, NIST, SOC2)

Key Success Metrics

- SLA compliance for remediation

- Reduction in aged vulnerabilities

- CMDB accuracy

- MTTR improvement

📌 Associate Consultant - Technology Infrastructure Compliance (India)
🏢 EXL Service
📍 India