This role is designed for a cybersecurity engineer with approximately 5+ years of experience in vulnerability management, security operations, and security tooling. The position is the operational backbone of the vulnerability management function, owning day-to-day operational tasks, troubleshooting, remediation follow-up, and tool operations while contributing to ongoing maturity projects. The engineer will partner with cybersecurity, infrastructure, application, and platform teams to evolve vulnerability management into a proactive, risk-based program and to run vulnerability management operations reliably, keep SLAs and reporting on track, and automate repetitive work, under the guidance of senior team members.

The role brings depth in areas such as risk-based prioritization, automation and AI-assisted triage, vulnerability disclosure, and exposure management, and mentors junior engineers to scale proven practices.

Duties &

Responsibilities · Own day-to-day vulnerability management operations, including scan monitoring, troubleshooting, and ongoing maintenance of scanning tools, agents, and integrations. · Review vulnerability assignments, follow up with asset owners against remediation SLAs, and escalate overdue items through defined channels. · Triage extension, exception, and false-positive requests and route them through the established approval workflow. · Administer and support vulnerability management and related security platforms and integrations. · Prepare recurring reports and dashboards, and support PCI DSS, SOC 2, and customer audit requests with accurate vulnerability evidence. · Write and maintain runbooks,



and identify repetitive tasks to automate with scripts, workflows, and APIs. · Contribute to maturity projects such as recent tool evaluations, process improvements, and risk-scoring and governance rollouts.

Technologies: · Qualys, NoName API Security, Seemplicity UVM/UEM, FIM, ServiceNow, CheckmarxOne, Orca Security, GitHub, EASM, CSPM, Rapid7 DAST · Vulnerability management, exposure management, DAST, API security, SAST, SCA, CSPM, IoT/OT security, threat intelligence, penetration testing, purple teaming · Python, PowerShell, Bash, REST APIs, SQL, Excel, Power BI, ServiceNow workflows

Requirements

Basic Qualifications

· Hands-on experience operating vulnerability scanning platforms, such as Qualys, Tenable, or Rapid7, including scan configuration, agents, and authenticated scanning.

· Working knowledge of vulnerability prioritization, remediation SLAs, exception handling, and metrics reporting.

· Familiarity with operating systems, networking, cloud, and container fundamentals sufficient to interpret scan findings.

· Experience with scripting or automation, such as Python, PowerShell, or Bash, and with REST APIs. · Experience supporting compliance and audit evidence requests, such as PCI DSS or SOC 2.

Preferred Qualifications

· Relevant certifications such as Qualys certifications, Security+, CySA+, GCIH, CEH, or equivalent security certifications.

· Experience integrating vulnerability findings into ServiceNow, Jira, or similar ITSM workflows with defined SLAs and ownership tracking.

· Experience with file integrity monitoring (such as Tripwire), API security, or application security tooling is preferred

📌 Senior Security Engineer – Vulnerability Management (Chennai)
🏢 Staples India
📍 Chennai