Title: Vulnerability Management Lead / Public Cloud Security Engineer

Location: Hyderabad/ Pune

Exp: 10+ Years

:

Key Responsibilities

- Lead the Vulnerability Management function across cloud and hybrid environments
- Define strategy, roadmap, and operating model for vulnerability management
- Lead the engineering, onboarding, and production support of cloud security and vulnerability management platforms
- Own the architecture, deployment, and lifecycle management of cloud security platforms
- Design and operate security controls that support Azure today while scaling into GCP
- Perform vulnerability scanning, assessment, prioritization, and remediation
- Detect, analyze, and remediate cloud vulnerabilities, misconfigurations, and control gaps
- Engineer control-break detection techniques to identify systemic security failures early
- Ensure closure of vulnerabilities within defined Service Level Agreements (SLAs)
- Manage the vulnerability lifecycle: Discovery ? Assessment ? Remediation ? Reporting
- Define and measure security-focused SLIs and SLOs in partnership with stakeholders
- Drive automation and reporting dashboards
- Act as escalation point for critical vulnerabilities; contribute to incident response, mitigation, and post-incident reviews from a cloud security perspective
- Partner with cloud engineering teams to embed security controls into platform design
- Research, evaluate, and recommend cloud security technologies aligned to the customer's risk posture
- Lead, mentor, and guide the vulnerability management team; develop junior security engineers, promoting strong engineering discipline and operational excellence
- Prioritize team tasks and workload Cloud Setting & Security Scope
- Microsoft Azure (primary / incumbent platform) — heavy hands-on exposure, approximately 70%
- Google Cloud Platform (GCP) for emerging data, platform, and AI workloads — working exposure, approximately 30%
- Multi-region cloud architectures supporting production, pre-production, and development environments
- Shared responsibility security models across infrastructure, platform, and application layers Cloud Security Focus Areas
- Cloud vulnerability management across compute, container, platform,



and managed services
- Identify, prioritize, and remediate cloud misconfigurations and vulnerabilities across Azure and GCP, including via Microsoft Defender for Cloud, Azure Security Center, Azure Policy, Azure Resource Graph, and cloud security posture management (CSPM)
- GCP-side visibility via Security Command Center, Cloud Asset Inventory, and Identity and Access Management (IAM)
- Detection of misconfigurations, control drift, and insecure cloud patterns • Exposure management spanning identity, network, data, and workload layers
- Reducing systemic risk through automation, standardization, and preventative controls Security Platforms & Tooling
- Vulnerability management tools: Qualys, Tenable (Nessus), Rapid7, and cloud-native security tools across Azure and GCP
- Cloud-native and enterprise security platforms, including vulnerability scanning and posture management tools; SIEM and centralized logging platforms; endpoint and workload protection technologies (EDR/XDR); packet capture and network visibility tooling where required
- Integration of security platforms via APIs into cloud and DevOps workflows
- Configuration management and automation across large-scale security platforms
- Working knowledge of network, operating system, endpoint, application, and cloud security Infrastructure & Automation
- Infrastructure as Code (IaC) and configuration management for security controls
- Terraform and cloud-native tooling to enforce secure-by-default patterns
- CI/CD and DevSecOps integrations to shift vulnerability detection left (basic DevSecOps understanding required)
- Python-based scripting and automation for control validation and response Reliability, Operations & Risk
- Apply Site Reliability Engineering (SRE) principles to security platforms to reduce outages and operational friction




- Participate in system design, platform management, and capacity planning
- Ensure audit-ready documentation, operational hygiene, and explicit escalation paths
- Maintain a strong understanding of enterprise risk culture, control frameworks, and risk reduction techniques

Experience & Required Qualifications

- 10–12+ years of overall experience in Cybersecurity, Infrastructure Security, Cloud Security, or Vulnerability Management
- Majority of that experience must be in Vulnerability Management, Vulnerability Assessment, Remediation Governance, and Security Operations
- Bachelor's degree in computer science, Information Systems, or equivalent engineering experience
- Senior-level experience engineering and operating security platforms in public cloud environments
- Strong hands-on Microsoft Azure experience (~70%), with working knowledge of Google Cloud Platform (~30%)
- Deep experience in vulnerability management, configuration assessment, and exposure reduction
- Proficiency in Python for security automation and tooling
- Experience operating large-scale distributed systems in regulated environments
- Strong understanding of UNIX/Linux internals, networking, and cloud infrastructure
- Proven leadership experience managing vulnerability management programs, remediation tracking, stakeholder governance, and technical teams Preferred Qualifications
- Financial services or highly regulated industry experience
- Experience integrating security platforms using APIs
- Familiarity with SIEM query languages (e.g., Splunk SPL, SQL-based analytics)
- Experience with DevSecOps and CI/CD security integrations
- Exposure to containerized and Kubernetes-based environments
- Experience applying AI/ML techniques to security analytics or detection Key Competencies
- Strong problem-solving and remediation mindset
- Excellent communication and stakeholder management
- Leadership with ownership-driven accountability
- Self-starter and motivated Success Criteria (KPIs)
- Reduction in high and critical vulnerabilities
- Improvement in remediation SLAs
- High-quality candidate validation and team product

📌 Vulnerability Management Lead / Public Cloud Security Engineer (Noida)
🏢 NR Consulting
📍 Noida