Description

Job Description: Vulnerability Management

Role Overview

We are seeking a highly skilled Vulnerability Management Specialist responsible for driving end-to-end vulnerability lifecycle management, patch compliance, and security posture optimization. The role requires strong expertise in Qualys, remediation governance, and coordination with cross-functional teams to ensure proactive risk mitigation aligned with enterprise security standards.

Key Responsibilities

1. Vulnerability Management & Scanning

- Manage Qualys agent deployment and lifecycle in collaboration with the IT Asset Management (ITAM) team

- Conduct and govern scheduled vulnerability scans:

- Weekly internal scans

- Monthly external scans

- Ensure scan coverage, accuracy, and alignment with organizational policies

2. Remediation Governance & Execution

- Drive wave-based remediation pipeline, including:

- Planning and prioritization

- Validation in test environments

- Defined acceptance criteria before production rollout

- Lead criticality-based remediation strategy:

- Prioritize Critical → High → Medium vulnerabilities

- Conduct post-remediation validation through Qualys re-scanning

3. Risk & Exception Management

- Manage exceptions and compensating controls with proper documentation and approvals

- Coordinate risk acceptance processes with stakeholders and security leadership

- Ensure audit readiness and compliance with internal and regulatory standards

4. Patch & Compliance Monitoring

- Track and enforce patch compliance across systems





- Publish monthly security posture and compliance reports to the CISO office

- Identify trends, gaps, and improvement areas in patching and vulnerability closure

5. System Hardening & Security Improvements

- Drive hardening initiatives for system images and configurations

- Support manual remediation and configuration-fix workflows where automation is not feasible

- Collaborate with engineering teams to institutionalize secure baselines

6. Segmentation & Security Posture Management

- Implement and manage asset segmentation (Red / Yellow / Green classification)

- Enable lab manager and workplace-level security controls

- Establish and maintain audit cadence for continuous improvement

Required Skills & Qualifications

- Strong hands-on experience with Qualys Vulnerability Management platform

- Deep understanding of vulnerability lifecycle management and remediation frameworks

- Experience with patch management, OS hardening, and security configurations

- Knowledge of risk management, exception handling, and compliance reporting

- Familiarity with enterprise IT infrastructure (servers, networks, endpoints)

Preferred Qualifications

- Certifications such as CISSP, CEH, CompTIA Security+, or equivalent

- Experience working with CISO office or security governance teams

- Exposure to audit frameworks (ISO 27001, NIST, CIS benchmarks)

Key Competencies

- Strong analytical and problem-solving ability

- Stakeholder management and cross-functional coordination

- Structured and process-oriented mindset

- Ability to drive execution under tight timelines

📌 Vulnerability Management Specialist (Bengaluru)
🏢 Leading
📍 Bengaluru