Senior Administrator - NESSUS, Compliance Remediation

Experience: Not Available to Not Available years

Location: Bengaluru, India

Skills: Nessus, VAPT tools, SAST, SCA, DAST, Checkmarx, JIRA, Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP)

Job Summary
Job Description :
Roles & Responsibilities – Application Security
1. Vulnerability Identification & Monitoring
• Monitor and track application vulnerabilities identified through security scanning tools such as SAST, SCA (Black Duck), DAST, Checkmarx, and SAST/SCA scans.
• Perform daily monitoring of application security posture using corporate security dashboards and compliance reports.
• Ensure all identified vulnerabilities are logged, categorized, and tracked as per defined severity and SLA timelines.
2. Vulnerability Remediation Coordination
• Coordinate with multiple application development and support teams to ensure timely remediation of security vulnerabilities within defined due dates.
• Follow up proactively with application owners to achieve closure of all security findings before compliance deadlines.
• Support teams by clarifying security findings and remediation guidance where required.
3. Validation & Review of Fixes
• Review and validate vulnerability remediation actions, including:
o Code fixes
o Configuration changes
o Decommissioning of unused components
o Verification of false positives
• Ensure remediation actions comply with client security standards and policies.
4. Security Testing & Assessment Support
• Support application security testing activities such as SAST, SCA,



and DAST configuration, execution, and validation.
• Coordinate with security teams and stakeholders during testing cycles to address security findings effectively.
• Assist in re-testing and validation after remediation to confirm successful closure of vulnerabilities.
5. Change & Release Management
• Ensure that all security fixes and remediation activities are deployed only through approved change management and release processes.
• Validate that security fixes are aligned with production release schedules and change approvals.
6. Compliance & Reporting
• Maintain application compliance status and ensure alignment with corporate security requirements.
• Update remediation details such as action plans, current status, and evidence in JIRA or relevant ticketing systems.
• Prepare and share regular security remediation status updates with stakeholders and management.
7. Stakeholder & Security Team Coordination
• Act as a key point of contact between application teams, security teams, and other stakeholders.
• Support effective communication and issue resolution related to application security and vulnerability management.




• Ensure continuous awareness and adherence to security best practices across supported applications.

Key Responsibilities
1. Provide Advanced Technical Support By Utilizing Nessus And Vapt Tools To Troubleshoot And Resolve Complex Security Incidents, Ensuring Adherence To Quality Standards And Regulatory Requirements.
2. Perform Detailed Root Cause Analysis On Escalated Incidents And Implement Robust Solutions To Address Technical And Security Issues, Enhancing The Overall Support Process.
3. Contribute To Knowledge Management By Updating The Knowledge Base And Conducting Training Sessions For New Team Members, Fostering A Culture Of Continuous Improvement.
4. Resolve Complex Support Tickets Within Agreed Slas While Collaborating With Cross-Functional Teams To Maintain Operational Efficiency And Strengthen Security Measures.
5. Ensure High Levels Of Customer Satisfaction And Csat By Achieving First Call Resolution, Minimizing Rejected Resolutions And Case Reopens, And Proactively Mitigating Security Threats.

Skill Requirements
1. Advanced Proficiency In Nessus And Vapt Tools For Vulnerability Assessment And Penetration Testing.
2. Strong Analytical And Problem-Solving Skills With The Ability To Perform Root Cause Analysis.
3. Excellent Communication Skills To Effectively Convey Technical Concepts To Non-Technical Stakeholders.
4. Familiarity With Quality Standards And Regulatory Compliance In The Support Operations Domain.

Other Requirements
1. Optional But Valuable Certifications: Certified Ethical Hacker (Ceh), Offensive Security Certified Qualified (Oscp)

📌 Senior Administrator NESSUS, Compliance Remediation (Bengaluru)
🏢 HCL Technologies
📍 Bengaluru