Job Title

Vulnerability Management Engineer Level 2

Role Objective The Vulnerability Management Engineer Level 2 is responsible for the day-to-day operational execution of the organizations vulnerability management activities. The role operates and maintains vulnerability management platforms (e.g., Tenable Security Center, Tenable One or comparable solutions), schedules and executes authenticated and unauthenticated scans, ensures onboarding of new assets into the scanning scope, and validates scan accuracy. The engineer actively tracks remediation activities with system owners, enforces defined remediation SLAs, and ensures that vulnerabilities are properly documented, re-tested, and closed.

The position ensures continuous visibility of technical exposure and supports measurable risk reduction through meaningful reporting and disciplined operational follow-up.

Key Responsibilities

- Tenable Infrastructure Operation: Operate and maintain Tenable Security Center (Tenable SC), Tenable One, and Nessus scanners

- Test and approve new Nessus Agent versions and Coordinate the rollout of them

- Keep scan engines, plugins, policies, and agents up to date

- Monitor connectivity, performance, and health

- Ensure proper scanner coverage and health monitoring

- Onboarding of New Systems: Deploy and troubleshoot Tenable Agents / Nessus Scanners / Nessus Managers

- Configure servers/VMs for active scanning

- Maintain scan templates and scanning policies

- Assign systems to correct Asset Groups and Scan Policies

- Execution and Monitoring of Vulnerability Compliance Scans: Schedule and perform regular vulnerability and compliance scans

- Monitor scan completion, accuracy, asset coverage, and scan errors

- Troubleshoot scanning issues (credentials, firewall blocks, service problems, missing ports, etc.)

- Analysis Prioritization of Findings: Review, validate, and prioritize vulnerabilities

- Use CVSS,



exploitability, and asset criticality for risk-based classification

- Provide explicit, concise recommendations to European stakeholders

- Remediation Tracking Escalation: Proactively follow up with server owners and application teams

- Track remediation progress and ensure timelines are met

- Highlight overdue critical findings and escalate when needed

- Support troubleshooting during patching or mitigation efforts

- Communication Reporting: Communicate professionally in English with European teams

- Prepare vulnerability reports, dashboards, KPIs, and SLA overviews

- Maintain documentation, runbooks, and operational procedures

- Support internal audits and compliance requirements

- Penetration Test Report Review Integration: Review and interpret penetration test reports delivered by internal or external security teams

- Validate the findings, assess their severity, and ensure they align with the organizations risk model

- Translate penetration test findings into actionable remediation tasks for system owners

- Follow up with responsible teams to ensure the identified weaknesses are addressed

- Integrate penetration test results into the vulnerability management workflow and tracking tools

- Provide summaries and clear explanations to stakeholders who may not have a security background

Required Knowledge

- Hands-on experience in Vulnerability Management and IT Security

- Strong understanding of CVE, CVSS, vulnerability types, and exploit mechanics

- Strong practical knowledge of Tenable SC, Tenable One, and Nessus

- Solid understanding of Windows and Linux server environments

- Good knowledge of networking (ports, protocols, firewalls, routing)

- Understanding of patching processes and change management

- Familiarity with compliance scanning (CIS benchmarks, hardening standards)

- Ability to understand common penetration testing techniques and methodologies (e.g., OWASP, MITRE ATT&CK;)

📌 Security Specialist (Pune)
🏢 VOLKSWAGEN GROUP DIGITAL SOLUTIONS PRIVATE
📍 Pune