Job Summary

Role: Vulnerability Management Engineer / Specialist
Experience: 5–8+ years
Domain: Cyber Security – Vulnerability Management

Role Objective

Responsible for identifying, assessing, prioritising and driving remediation of security vulnerabilities across infrastructure, applications, cloud and network environments to reduce organisational cyber risk.

Key Responsibilities

Key Responsibilities

- Perform vulnerability scanning and assessment across servers, endpoints, network devices, databases and cloud environments.
- Administer enterprise vulnerability-management platforms such as Tenable Nessus/Tenable.io, Qualys VMDR or Rapid7 InsightVM.
- Analyse vulnerabilities based on CVSS score, exploitability, asset criticality and business impact.
- Prioritise critical/high-risk vulnerabilities and coordinate remediation with infrastructure, application, cloud and network teams.
- Track vulnerabilities from identification through remediation, validation and closure.
- Perform rescanning and validation after patching/remediation.
- Manage vulnerability ageing, SLA breaches, exceptions and risk-acceptance cases.
- Identify zero-day and actively exploited vulnerabilities, including assessment against CISA KEV where applicable.
- Develop vulnerability dashboards covering critical/high vulnerabilities, ageing, SLA compliance, remediation trends and risk exposure.
- Support patch and vulnerability governance meetings and drive ownership of outstanding remediation actions.
- Investigate recurring vulnerabilities and recommend permanent corrective actions.
- Support vulnerability remediation across Windows, Linux, network, middleware and cloud platforms.
- Create and maintain SOPs,



remediation guidance, audit evidence and operational documentation.
- Work with Incident Management, SOC, Cyber Security, Infrastructure and Application teams during critical security events.
- Support audits and compliance requirements related to vulnerability and patch management.

Skill Requirements

Mandatory Technical Skills

- Tenable / Qualys / Rapid7 vulnerability-management platforms
- CVSS, CVE and CISA KEV understanding
- Vulnerability scanning and risk-based prioritisation
- Windows and Linux vulnerability remediation knowledge
- Network and infrastructure security fundamentals
- Azure/AWS cloud vulnerability-management concepts
- Patch and configuration management
- Reporting and security dashboards
- ServiceNow or equivalent ITSM platform
- Strong vulnerability analysis and RCA capabilities

Must Have Skill

Vulnerability & Compliance Remediation

Positive to Have Skill

Other Requirements

Good to Have

- Microsoft Defender Vulnerability Management
- PowerShell/Python automation
- Application and container vulnerability-management exposure
- CIS Benchmarks and security-hardening knowledge
- SIEM/SOC integration experience
- Security certifications such as Security+, CEH, CISSP or relevant vendor certifications

Key Deliverables

Discovery & Scanning Risk Assessment Prioritisation Remediation Coordination Rescan & Validation Exception Management Compliance & Reporting

Key KPIs

- Critical/High vulnerability ageing
- Remediation SLA compliance
- Reduction in overdue vulnerabilities
- Vulnerability recurrence rate
- Scan coverage
- Risk acceptance/exception ageing
- Critical vulnerability remediation effectiveness

📌 Track Lead (Support & Operations) (India)
🏢 HCLTech
📍 India