Role & responsibilities

Required skills

- Vulnerability fundamentals: CVE, CVSS, EPSS, CISA KEV, severity versus risk, common vulnerability classes and remediation methods (patching, configuration, upgrades, compensating controls).

- Exposure management basics: internet-facing assets and services, end-of-life software, misconfigurations, attack surface findings.

- Triage and ticketing: validation, de-duplication, scoping, ownership lookup, SLA-based due dates, transparent ticket writing, escalation paths.

- Remediation tracking: follow-up discipline, verification by re-scan or re-detection, exception and risk-acceptance handling with expiry dates.

- Tools, vendor-agnostic: vulnerability scanners and endpoint security consoles, attack surface tooling, CMDB and asset inventories, ITSM ticketing.

- Data handling: intermediate Excel (filters, pivot tables, lookups), basic data quality checks,



accurate record keeping.

- Communication: plain-language explanations for non-security owners, concise status reporting, professional follow-up.

- Working habits: attention to detail, ownership of a queue, ability to prioritize under volume, discipline in secure environments.

Nice to have, including certifications

- Hands-on experience with CrowdStrike Falcon Spotlight, Rapid7 InsightVM, Tenable or Qualys; Cortex Xpanse or another external attack surface management tool; ServiceNow Vulnerability Response; Microsoft Defender.

- Scripting basics (Python or PowerShell) or SQL for queue analysis and reporting.

- Exposure to OT environments or manufacturing sites.

📌 Vulnerability Management Engineer_ Exp: 7+ Years (Bengaluru)
🏢 Atyeti
📍 Bengaluru