JD - Vulnerability Specialist

Hands on experience with Patch Management

Tools: BigFix, Antivirus Management,

Security: Vulnerability Management and Remediation

Demonstrated ability to become an expert in our products and services, the market and the competition

Help transform managed services to a fully automated dev-ops approach

Ability to generate ideas for current features through innovation and market / industry expertise

Engage in cross-company solution development task forces

Experienced in AIX, Linux, Windows System administration, virtualization, networking.

Should have experience in Shell, Perl, Python scripting.

Proven skills on configuration tools like chef, puppet.

Key Responsibilities

- Manage the complete vulnerability remediation lifecycle from identification through validation

and closure.
- Analyze vulnerability scan results from tools such as:

Qualys VMDR

Tenable Nessus

Rapid7 InsightVM

Microsoft Defender Vulnerability Management
- Prioritize vulnerabilities based on:

CVSS Score

EPSS

CISA Known Exploited Vulnerabilities (KEV)

Business Criticality

Asset Exposure

- Coordinate remediation with Infrastructure, Cloud, Database, Middleware, Network, and

Application teams.
- Plan and execute monthly patching and emergency security updates.
- Validate remediation through rescans and ensure successful closure.
- Investigate false positives and recommend compensating controls where remediation is not

feasible.
- Track remediation SLAs and escalate overdue vulnerabilities.
- Support Zero-Day vulnerability response and emergency patch deployments.
- Create dashboards and executive reports covering:

Vulnerability trends

MTTR

SLA compliance

Risk exposure

- Automate remediation workflows using PowerShell, Python, or REST APIs.
- Maintain accurate asset inventory and vulnerability ownership.
- Support internal and external security audits.

Technical Skills

Vulnerability Management

- Qualys VMDR




- Tenable Nessus
- Rapid7 InsightVM
- Microsoft Defender VM

Operating Systems
- Windows Server
- Linux (RHEL, Ubuntu, SUSE)
- VMware ESXi

Cloud
- AWS
- Azure
- Google Cloud Platform

Endpoint Management
- Microsoft SCCM
- Microsoft Intune
- BigFix
- Tanium
- JAMF

Scripting
- PowerShell
- Python
- Bash

ITSM
- ServiceNow
- Jira

Required Knowledge
- Vulnerability Management Lifecycle
- Patch Management
- CVE / CVSS
- CISA KEV
- Risk-Based Vulnerability Management
- Asset Management
- Change Management
- Security Hardening (CIS Benchmarks)
- Operating System Security
- Network Security Fundamentals
- Cloud Security

Compliance & Frameworks
- NIST Cybersecurity Framework (CSF)
- NIST SP 800-40 (Patch Management)
- CIS Benchmarks
- ISO/IEC 27001
- PCI DSS
- SOC 2
- ITIL

Soft Skills
- Excellent communication and stakeholder management
- Strong analytical and troubleshooting skills
- Ability to manage multiple remediation projects simultaneously
- Risk-based decision making
- Cross-functional collaboration
- Executive reporting and presentation

Key Performance Indicators (KPIs)
- Mean Time to Remediate (MTTR)

- Critical vulnerability SLA compliance
- High-risk vulnerability backlog reduction

- Patch deployment success rate

- Vulnerability recurrence rate
- Asset coverage for vulnerability scanning

- Audit findings closure rate

Preferred Experience
- Experience supporting enterprise environments with 10,000+ endpoints.
- Hands-on experience with Qualys/Tenable, enterprise patch management, and security

automation.
- Experience remediating vulnerabilities across Windows, Linux, VMware, Cloud, Network, and

Endpoints.
- Knowledge of Zero-Day vulnerability response and emergency patch management.
- Familiarity with DevSecOps and CI/CD security integration is an advantage.

This JD is suitable for organizations following NIST, ITIL, ISO 27001, and SOC 2 practices and aligns with current enterprise expectations for vulnerability remediation roles.

📌 Vulnerability Analyst (Bengaluru)
🏢 HCLTech
📍 Bengaluru