Key Responsibilities:
- Perform vulnerability assessments across servers, endpoints, network devices, and cloud environments using Nessus SC and Nessus IO (Tenable).
- Analyse scan results, validate vulnerabilities, and prioritize remediation based on CVSS score, asset criticality, and business impact
- Coordinate with infrastructure, application, and cloud teams for timely remediation and closure of vulnerabilities.
- Maintain vulnerability management documentation, procedures, and remediation guidelines.
Skills expectations -
- Hands-on experience with Nessus for authenticated and unauthenticated vulnerability scanning.
- Good understanding of the vulnerability management lifecycle, including identification, validation, prioritization, remediation, and reporting.
- Knowledge of CVE, CVSS, vulnerability severity ratings, and remediation best practices.
- Basic understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, SSH, and common network ports.
- Ability to analyse scan findings related to network services and connectivity.
- Familiarity with firewalls, VLANs, and basic routing concepts.
- Working knowledge of Windows and Linux operating systems.
- Ability to verify patches, services, and configuration-related vulnerabilities.
- Experience in preparing vulnerability reports, dashboards, and remediation tracking.
- Robust analytical, problem-solving, and stakeholder communication skills.
- Good to have: Working knowledge of automation techniques using API, scripting, CI/CD and orchestration.
📌 Cyber Assurance Analyst (Pune)
🏢 NCSi
📍 Pune