Having 3-8 years of hands-on experience, working as a Vulnerability management engineer in the Application and Infrastructure/Cloud space
Primary Skills:
- Daily assessment experience of vulnerabilities reports identified by SAST, DAST and SCA tools
- Experience to Evaluate, rate and perform risk assessments on the findings. Knowledge of risk assessment methods like Modular Risk Assessment process (MoRA), Threat Analysis and Risk Assessment(TARA) defined by ISO/SAE 21434 is a plus.
- Should be able to quickly analyze and prioritize the vulnerabilities discovered
- Communicate with the Security Function owners within each team for the tracking and mitigation of the prioritized vulnerabilities
- Interaction with multiple teams like Development teams, penetration testing teams, independent researchers, suppliers and team across multiple brands