Mandatory

- 7+ years of experience in vulnerability / exposure management, infrastructure security, and security architecture in enterprise environments.

- Proven design and delivery of enterprise VM programmes, including architecture, integrations, and governance, on at least one major VM platform.

- Solid infrastructure security knowledge across Windows, Linux, network devices, virtualization, and at least one cloud platform (AWS / Azure / GCP).

- Experience defining risk-based prioritization, remediation SLAs, and exception governance.

- Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field (or equivalent demonstrated experience).

Desirable

- Experience implementing CTEM, exposure management, or attack-path analysis programmes.

- Experience with OT / IoT vulnerability management or container / Kubernetes workload scanning.

- Scripting and API automation experience (Python, PowerShell) for VM integrations and reporting.

- Experience with AI-assisted VM tooling and governed AI adoption.





- Customer-facing consulting, transformation, escalation handling, and solutioning experience.

Knowledge areas and standards

- Vulnerability lifecycle, risk-based vulnerability management, and CTEM principles.

- CVSS (v3.1 / v4.0), EPSS, CISA KEV, CVE / CWE, and vulnerability intelligence sources.

- MITRE ATT&CK; for exposure mapping and threat-informed prioritization.

- CIS Controls and CIS Benchmarks; secure configuration and hardening baselines.

- NIST Cybersecurity Framework (CSF) 2.0 and NIST SP 800-40 (enterprise patch management).

- Zero Trust principles, network segmentation, and identity-aware security architecture.

- Compliance mapping to frameworks such as ISO/IEC 27001, PCI DSS, and SOC 2 where relevant to client engagements.

- AI risk and governance for VM workflows (NIST AI RMF; data leakage, automation errors, tool supply chain).

📌 Infrastructure Vulnerability Management Architect (Bengaluru)
🏢 Wipro
📍 Bengaluru