We are seeking a highly skilled and forward-thinking Senior Security Engineer to join Flipkart Infosec team and lead Vulnerability Management program. In this role, the candidate will be responsible for the end-to-end lifecycle of vulnerability discovery, configuration assessment, prioritization, and remediation governance.
The ideal candidate possesses 5+ years of dedicated experience in Vulnerability Assessment (VA) and remediation governance, alongside deep technical expertise in managing enterprise-grade VA tools. Beyond traditional VM, we will leverage development skills for automation and AI-based vulnerability and patch management technologies to scale and modernize our security posture. The candidate should also champion secure configuration standards across endpoint and network environments to ensure robust compliance.
Key Responsibilities
Program & Remediation Governance
- Vulnerability Assessment:
Proactive identification of security weaknesses across an organization's digital assets like network infrastructure (routers, switches, firewalls etc.,) , Cloud ecosystem and the compute infrastructure (servers, virtual machines, endpoints, applications.
- Drive Remediation: Lead governance efforts to ensure vulnerabilities are remediated within established SLAs.
- Stakeholder Collaboration: Partner with IT operations and business unit owners to track, validate, and oversee patch management and mitigation efforts.
- Risk Contextualization: Analyze vulnerability data to assess actual business risk, providing technical teams with actionable prioritization guidance beyond standard CVSS scores.
- Reporting & Metrics: Design and deliver comprehensive vulnerability dashboards and compliance reports for both technical teams and senior leadership.
- Attack Surface & Exposure Management: Leverage External Attack Surface Management (EASM) tools to identify internet-facing shadow IT