06 Sep
|
WM Global Technology Services India
|
India
06 Sep
WM Global Technology Services India
India
Position Summary...
What you'll do...
About the team
The Threat & Vulnerability Management (TVM) team at Walmart is a critical pillar of the Global Information Security organization. Operating out of the India Development Center, this team is part of Walmart's enterprise-wide mission to proactively identify, prioritize, and drive the remediation of security vulnerabilities across one of the world's largest and most complex technology ecosystems — spanning on-premise infrastructure, cloud environments, and retail technology.
Our TVM team works on Walmart's unified vulnerability intelligence platform which aggregates data from multiple scanning tools and penetration testing platforms. The team partners directly with engineering, DevOps, cloud, and compliance stakeholders to reduce mean time to remediate (MTTR), enforce SLA adherence, and provide risk-based security insights to leadership.
As part of the Security Intelligence & Management (SIM) function, the TVA sub-team is specifically responsible for managing risk scoring, vulnerability ownership,
and the accuracy of security issue data across the enterprise. This is a high-visibility, high-impact team that operates at the intersection of data, security engineering, and organizational risk management.
What You’ll Do
Vulnerability Identification & Risk Scoring
- Own and continuously refine Walmart CVSS scoring vectors and risk ratings for vulnerabilities ingested into VM tool, incorporating asset criticality, business context, exploitability data (EPSS), and threat intelligence (CISA KEV catalog).
- Validate and triage vulnerability findings from multiple data sources..
- Identify, investigate, and remediate false positives in scan data; improve signal-to-noise ratio across all data sources.
- Develop and maintain Diesel Rules (regex-based ownership matching logic) within VM Tool to ensure accurate and automated vulnerability ownership assignment at scale.
- Conduct asset-level PCI scope management and ensure compl
📌 Staff, Risk Expert (India)
🏢 WM Global Technology Services India
📍 India