This Position reports to:
IS Manager
Overview:
Highly skilled and experienced Vulnerability Management Subject Matter Expert (SME) who has a robust background in vulnerability management, specifically with expertise in using Qualys, ServiceNow, SharePoint, and IT Service Management (ITSM) practices. This role is critical in ensuring our organization''s infrastructure remains secure by identifying, assessing, and managing vulnerabilities across our systems.
This job is L1#Hybrid
Key Responsibilities:
- Lead and manage the end-to-end vulnerability management lifecycle, conducting regular assessments using Qualys and other security tools, analyzing findings, prioritizing risks, and driving timely remediation activities.
- Utilize and optimize Qualys, ServiceNow, and SharePoint to perform vulnerability scanning, tracking, workflow management, reporting, documentation, and governance activities.
- Collaborate closely with Information Security, Infrastructure, Application, and IT teams to communicate risks, coordinate remediation efforts, and provide status updates to stakeholders and senior leadership.
- Integrate vulnerability management practices within ITSM frameworks, ensuring alignment with ITIL best practices and contributing to continuous process improvement initiatives.
- Develop and deliver vulnerability management training and awareness programs,
promoting security best practices and enhancing organizational understanding of risk mitigation and compliance requirements.
Qualifications :
- Bachelors degree in Information Security, Computer Science, IT, or a related field, with relevant certifications such as CISSP, CISM, Qualys Certified Specialist (QCS), ITIL Foundation, CEH, or Security+ preferred.
- 8 to 12 years of experience in Vulnerability Management, Cybersecurity, or Information Security, with proven expertise in Qualys, Wiz, Brinqa, ServiceNow, SharePoint, and ITSM/ITIL-based processes.
- Strong hands-on experience in end-to-end vulnerability management, including assessment, risk prioritization, remediation tracking, reporting, and governance across on-premises and cloud environments.
- Proficiency in ServiceNow Vulnerability Response workflows, Brinqa risk-based prioritization, Wiz cloud security posture management, and Qualys scanning and reporting, with experience creating dashboards and executive-level reports.
- Excellent analytical, problem-solving, communication, and stakeholder management skills, with experience in automation and integrations using Python, PowerShell, and APIs, and exposure to security technologies such as SIEM, IDS/IPS, EDR/XDR, and cloud platforms (Azure, AWS, GCP).
📌 IS-Vulnerability Management Subject Matter Expert (SME) (Bengaluru)
🏢 ABB
📍 Bengaluru