Key Responsibilities

1. Vulnerability Management
2. Conduct vulnerability assessments across networks, servers, endpoints, cloud platforms, and business applications.
3. Perform vulnerability analysis, triage findings, and prioritize remediation based on business risk.
4. Track remediation activities and validate closure of identified vulnerabilities.
5. Maintain vulnerability registers, remediation status, and management reporting.
6. Penetration Testing & Security Assessments
7. Conduct internal and external penetration testing of applications, APIs, cloud platforms, and network environments.
8. Perform security validation of internally developed applications prior to production deployment.
9. Identify security weaknesses and provide actionable remediation recommendations.
10. Support periodic red team and security testing exercises where required.
11. Continuous Threat Exposure Management (CTEM)
12. Support and operate the firm's Continuous Threat Exposure Management program.
13. Perform regular attack surface reviews and identify emerging exposure risks.
14. Monitor security advisories, threat intelligence feeds, and relevant CVEs affecting the organization's technology landscape.
15.



Recommend preventive and corrective actions to reduce risk exposure.
16. Remediation & Risk Management
17. Work with Infrastructure, Cloud, Network, and Application teams to address identified vulnerabilities.
18. Validate remediation effectiveness and support risk acceptance processes where required.
19. Track compliance with vulnerability remediation SLAs.
20. Escalate critical and overdue findings to management.

Qualifications & Experience
- Bachelors degree in computer science, Information Technology, Cybersecurity, or a related discipline.
- 3-5 years of experience in Vulnerability Management, Penetration Testing, Application Security, or Security Assessment roles.
- Hands-on experience with vulnerability assessment tools such as Nessus, Qualys, Rapid7, Tenable, or equivalent.
- Experience performing penetration testing of applications, APIs, cloud platforms, and network environments.
- Good understanding of AWS, Azure, cloud security concepts, and common cloud vulnerabilities.
- Knowledge of OWASP Top 10, CVSS scoring, vulnerability prioritization, and remediation methodologies.
- Robust analytical, documentation, and communication skills.

📌 Threat & Vulnerability Specialist (Coimbatore)
🏢 protiviti india
📍 Coimbatore