Description The Vulnerability Assessment Engineer is responsible for identifying, analyzing, and reporting security vulnerabilities across the organization's IT infrastructure, with a specific focus on integrating and securing new servers during their onboarding and commissioning phases using industry-leading tools like Qualys or Tenable.The Vulnerability Assessment Engineer is responsible for identifying, analyzing, and reporting security vulnerabilities across the organization's IT infrastructure, with a specific focus on integrating and securing current servers during their onboarding and commissioning phases using industry-leading tools like Qualys or Tenable.

Responsibilities

- Execute regular and ad-hoc vulnerability scans across the enterprise network, applications, and systems using Qualys Vulnerability Management (VMDR) or Tenable.io/Nessus.
- Analyze scan results, prioritize vulnerabilities based on risk, and provide detailed reports to relevant stakeholders.
- Actively participate in the server commissioning process, ensuring all new servers are integrated into the vulnerability management program from day one.
- Perform initial baseline vulnerability assessments on newly provisioned servers before they enter production, identifying and reporting critical security gaps.
- Collaborate with server administrators and project teams to ensure identified vulnerabilities on new servers are remediated or mitigated according to security policies and timelines.
- Verify the secure configuration of new servers against established security baselines and compliance requirements.
- Work closely with IT operations, development,



and system owners to facilitate the remediation of identified vulnerabilities.
- Track remediation efforts and re-scan systems to confirm the effectiveness of applied patches and configuration changes.
- Maintain, configure, and optimize vulnerability scanning platforms (Qualys or Tenable) to ensure accurate and comprehensive coverage.
- Develop and refine scanning policies, profiles, and reporting templates.
- Generate comprehensive vulnerability reports, dashboards, and metrics for various audiences, including technical teams and management.
- Maintain accurate documentation of vulnerability assessment processes, findings, and remediation activities.

Qualifications

Must-Have:

- Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.
- Up to 4-7 years of experience in cybersecurity, with a strong focus on vulnerability management or security operations.
- Demonstrable hands-on experience with either Qualys (VMDR, Cloud Agent) or Tenable (Nessus, Tenable.io, Security Center) platforms.
- Solid understanding of network protocols, operating systems (Windows, Linux), and common enterprise applications.
- Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS Benchmarks).

Nice-to-Have:

- Strong analytical and problem-solving skills, with attention to detail.
- Excellent written and verbal communication skills, capable of explaining complex technical issues to both technical and non-technical audiences.
- Ability to prioritize tasks, manage multiple projects, and work effectively in a fast-paced environment.
- Scripting skills (e.g., Python, PowerShell) for automation and data analysis are a plus.

📌 VAPT & Red Teaming Analyst (India)
🏢 Nokia Global
📍 India