Role & responsibilities

Required skills
Vulnerability fundamentals: CVE, CVSS, EPSS, CISA KEV, severity versus risk, common vulnerability classes and remediation methods (patching, configuration, upgrades, compensating controls).
Exposure management basics: internet-facing assets and services, end-of-life software, misconfigurations, attack surface findings.
Triage and ticketing: validation, de-duplication, scoping, ownership lookup, SLA-based due dates, transparent ticket writing, escalation paths.
Remediation tracking: follow-up discipline, verification by re-scan or re-detection, exception and risk-acceptance handling with expiry dates.
Tools, vendor-agnostic: vulnerability scanners and endpoint security consoles, attack surface tooling, CMDB and asset inventories, ITSM ticketing.
Data handling: intermediate Excel (filters, pivot tables, lookups), basic data quality checks,



accurate record keeping.
Communication: plain-language explanations for non-security owners, concise status reporting, skilled follow-up.
Working habits: attention to detail, ownership of a queue, ability to prioritize under volume, discipline in secure environments.

Nice to have, including certifications
Hands-on experience with CrowdStrike Falcon Spotlight, Rapid7 InsightVM, Tenable or Qualys; Cortex Xpanse or another external attack surface management tool; ServiceNow Vulnerability Response; Microsoft Defender.
Scripting basics (Python or PowerShell) or SQL for queue analysis and reporting.
Exposure to OT settings or manufacturing sites.

📌 Vulnerability Management Engineer Exp: 7+ Years Bengaluru
🏢 Atyeti
📍 Bengaluru