10 Nov
|
CACI Digital Experience (formerly Cyber-Duck)
|
Pune
10 Nov
CACI Digital Experience (formerly Cyber-Duck)
Pune
We are seeking an experienced Network Vulnerability Management Lead to own and drive our end-to-end vulnerability management programme across the enterprise network estate. You will work closely with cross-functional technical teams to ensure risk-based remediation is executed swiftly against strict SLAs, maintaining an audit-ready security posture.
Own the end-to-end vulnerability management process across the network estate—from initial identification and assessment through remediation, validation, and formal closure.Drive vulnerability remediation against tight SLA and compliance targets, ensuring risks are resolved within agreed timescales.Track, report, and present remediation progress to leadership, escalating overdue actions and emerging risks when necessary.Serve as the primary subject matter expert and point of contact for all network infrastructure vulnerability management activities. Collaboration & Stakeholder Engagement Partner closely with Cyber Hygiene, Security Operations, Engineering, and Infrastructure teams to review findings and agree on optimal remediation paths.Translate technical risks into business impacts, clearly communicating priorities and status updates to technical and non-technical stakeholders alike.
Vulnerability Assessment & Risk Analysis
Review scan data from enterprise security tools (e.g., Assess vulnerabilities for exploitability, business exposure, operational risk, and regulatory compliance requirements.Prioritise remediation efforts based on CVSS scoring, risk-based methodology, and organisational security policies.Formulate robust temporary mitigation strategies and workaround plans when immediate patching or resolution is not feasible.
Oversee the complete remediation lifecycle from initial discovery to engineering implementation.Perform hands-on remediation across network infrastructure technologies when required.Coordinate with Network Engineering to execute fixes in full compliance with change management and operational governance standards.Review and validate implementation plans to ensure technical soundness prior to deployment in production environments. Perform rigorous post-remediation validation via rescanning, manual testing, and tool verification.Maintain complete, audit-ready documentation and evidence of remediation, approvals, testing, and validation results.Ensure all vulnerability database records are accurately updated and closed per corporate governance requirements.
Experience & QualificationsEssential CriteriaProgramme Experience
Proven track record of managing enterprise vulnerability management programmes within large-scale, complex network environments. Domain Knowledge: Deep understanding of vulnerability management frameworks, CVSS scoring, risk-based remediation strategies, and lifecycle management.
Hands-on experience driving remediation within strict SLA and compliance-driven operational environments.
Demonstrated experience taking vulnerabilities through the full lifecycle: discovery, engineering handover, implementation, validation, and certification.
Network Infrastructure Expertise
Routers and SwitchesFirewalls and Network Security AppliancesLoad BalancersWireless Infrastructure
Experience deploying security patches, executing software upgrades, modifying configurations, and applying mitigations in live production environments.Key Success MeasuresSLA Performance
Consistently meeting or exceeding SLA targets for vulnerability remediation across critical network assets.
Operational Efficiency: Timely handover and high-quality execution of engineering work packages.
Compliance & Quality: Zero failed re-scans post-certification and full audit readiness.
Continuous reduction in the organisation's overall network risk exposure and attack surface.
📌 Cyber Security - Information Security Officer (Pune)
🏢 CACI Digital Experience (formerly Cyber-Duck)
📍 Pune