Profile: Technical Lead (Infrastructure Vulnerability Management)

Location: No location constraints (but preference to Pune/Mumbai)

Band: B3

Experience: 6 8 years

Responsibilities

- Conducting regular and comprehensive vulnerability assessments of networks, systems, and applications using the VA tools (e.g., Qualys, Saner, Tenable, Rapid7, etc.)

- Prioritize remediation of discovered vulnerabilities and coordinate mitigation efforts across all teams and systems.

- Collaborate with team members and help operationalize defined vulnerability management processes.

- Coordinate with respective teams to ensure timely update and configuration of software and operating systems with the latest patches and security settings to ensure the proper defences are present.

- Contribute to defining, reviewing, and enacting security policies and practices.

- Stay apprised of the threat landscape, vulnerabilities, and industry best practices, and make recommendations to improve Wipro's security posture.

- Review and create SOPs & technical documents/runbooks to support team processes and ISMS requirements.

- Work closely with other information security teams to ensure operational efficiency and stay apprised of overall Wipro security posture and capabilities.

Requirements





- Bachelor's degree in information security, Information Technology, or a related field.

- 6-8 years of experience in Threat and Vulnerability Management or equivalent knowledge.

- Proficiency in using the VA tools (e.g., Qualys, Saner, Tenable, Rapid7, etc.) for vulnerability assessments.

- Hands-on experience with reports and representation with various dashboards.

- Good understanding of CIS benchmarks and policies.

- Knowledge of CVSS scoring, exploitability, patching, and configuration risks.

- Exposure to enterprise audit and compliance requirements

- Familiarity with the ServiceNow tool will be advantageous.

- Must be a team player, dedicated, and proactive.

- Must possess positive communication, problem-solving, critical thinking, and organizational skills.

- Must have good presentation skills.

- Ability to clearly present technical approaches or findings in oral and written format.

- Ability to present ideas in business-friendly and user-friendly language.

- Experience working in large enterprise or regulated environments.

- Relevant certifications (preferred):

- CISSP, CISM, CEH, CompTIA Security+

- Vendor specific VA tool certifications

📌 Infrastructure Vulnerability Management (Pune)
🏢 TalentOla
📍 Pune