Job Summary:

We are seeking a skilled Vulnerability Assessment Engineer with 3–5 years of experience in identifying, analyzing, and managing security vulnerabilities across on-premise and cloud environments. The ideal candidate should have hands-on experience with Tenable/Nessus and Prisma Cloud, along with a robust understanding of security best practices and risk mitigation.

Key Responsibilities:
Perform regular vulnerability assessments using tools like Tenable/Nessus
Analyze scan results, prioritize vulnerabilities, and provide remediation recommendations
Manage and maintain vulnerability scanning tools and dashboards
Conduct authenticated and unauthenticated scans across networks, systems, and applications
Work with IT and DevOps teams to ensure timely closure of vulnerabilities
Perform cloud security assessments using Prisma Cloud (formerly Twistlock/RedLock)
Validate remediation through re-scans and verification processes
Generate detailed vulnerability reports and risk assessments for stakeholders
Ensure compliance with security standards (ISO 27001, PCI-DSS,



etc.)
Track vulnerabilities through lifecycle until closure
Required Skills:
Hands-on experience with Tenable Security Center / Nessus
Experience in vulnerability scanning and management
Exposure to Prisma Cloud (Cloud security posture management)
Strong understanding of network security concepts (ports, protocols, firewalls)
Knowledge of common vulnerabilities (OWASP Top 10, CVEs, CVSS scoring)
Experience with Windows, Linux, and basic system hardening
Familiarity with ticketing tools (ServiceNow, JIRA, etc.)
Basic scripting knowledge (Python / Bash – added advantage)
Good analytical and reporting skills
Good to Have Skills:
Experience in cloud platforms (AWS / Azure / GCP)
Knowledge of container security (Docker, Kubernetes)
Certifications like CEH, CompTIA Security+, or Tenable certifications
Exposure to SIEM tools
Experience with patch management processes

📌 Engineer - Information Security (Navi Mumbai)
🏢 3i Infotech
📍 Navi Mumbai