• Security Specialist/Assistant Manager
• Role Summary:
•
• Lead Enterprise Vulnerability Management (EVM) activities across servers, workstations, cloud, network, and application assets.
•
• Perform vulnerability analysis, risk assessment, prioritization, and remediation tracking based on CVSS, exploitability, threat intelligence, and business impact.
•
• Drive Vulnerability Prioritization and Remediation (VPR) activities, including Code Red / Code Black / Code Yellow / Code Green campaigns within defined SLA timelines.
•
• Conduct CVE analysis, zero-day vulnerability assessments, threat exposure reviews, and proactive monitoring of security advisories and threat intelligence feeds.
•
• Prepare Vulnerability Action Memos (VAMs), executive communications, impact assessments, and remediation recommendations for critical vulnerabilities.
•
• Perform asset ownership mapping, application impact analysis, UAI identification, and stakeholder coordination using Qualys, ServiceNow, and enterprise asset repositories.
•
• Drive vulnerability remediation with application, infrastructure, cloud, network, and business stakeholders.
•
• Manage Secure Code Campaign governance, remediation tracking, compliance reporting, and vulnerability exception management.
•
• Administer and support the Qualys VMDR platform, including scanners, cloud agents, connectors, policy compliance, and reporting.
•
• Monitor vulnerability SLAs, compliance metrics, backlog reduction initiatives, governance reviews, and escalation activities.
•
• Prepare executive dashboards, RCA, POA, ETA reports, governance metrics, and stakeholder communications.
•
• Coordinate Sev 1 to Sev 5 vulnerability remediation activities and support audit, compliance, and regulatory requirements. Responsibilities




• Lead Enterprise Vulnerability Management (EVM) activities across servers, workstations, cloud, network, and application assets.
• Perform vulnerability analysis, risk assessment, prioritization, and remediation tracking based on CVSS, exploitability, threat intelligence, and business impact.
• Drive Vulnerability Prioritization and Remediation (VPR) activities, including Code Red / Code Black / Code Yellow / Code Green campaigns within defined SLA timelines.
• Conduct CVE analysis, zero-day vulnerability assessments, threat exposure reviews, and proactive monitoring of security advisories and threat intelligence feeds.
• Prepare Vulnerability Action Memos (VAMs), executive communications, impact assessments, and remediation recommendations for critical vulnerabilities.
• Perform asset ownership mapping, application impact analysis, UAI identification, and stakeholder coordination using Qualys, ServiceNow, and enterprise asset repositories.
• Drive vulnerability remediation with application, infrastructure, cloud, network, and business stakeholders.
• Manage Secure Code Campaign governance, remediation tracking, compliance reporting, and vulnerability exception management.
• Administer and support the Qualys VMDR platform, including scanners, cloud agents, connectors, policy compliance, and reporting.
• Monitor vulnerability SLAs, compliance metrics, backlog reduction initiatives, governance reviews, and escalation activities.
• Prepare executive dashboards, RCA, POA, ETA reports, governance metrics, and stakeholder communications.
• Coordinate Sev 1 to Sev 5 vulnerability remediation activities and support audit, compliance, and regulatory requirements. Qualifications Prior

Experience:
The candidate must have 6 to 8 years of relevant experience in a similar role, preferably in a qualified services organization.

📌 Asst. Manager_MAST (Bengaluru)
🏢 KPMG Global Services
📍 Bengaluru