Roles & Responsibilities

1. Manage and drive the end-to-end Vulnerability Management lifecycle including vulnerability identification, assessment, prioritization, remediation tracking, validation, and closure.
2. Conduct Vulnerability Assessments and coordinate penetration testing activities across applications, APIs, operating systems, databases, cloud environments, and enterprise infrastructure.
3. Perform vulnerability analysis using tools such as HCL AppScan, Nessus, Nmap, Kali Linux, Burp Suite, OWASP ZAP, and other industry-standard security solutions.
4. Validate vulnerabilities, eliminate false positives, assess exploitability, and recommend appropriate remediation actions based on business risk.
5. Prioritize vulnerabilities using severity ratings, CVSS scores, exploitability, asset criticality, threat intelligence, and business impact.
6. Collaborate with application, infrastructure, cloud, DevOps, and security teams to drive timely remediation and closure of identified vulnerabilities.
7. Track remediation activities and ensure compliance with defined vulnerability management SLAs and security policies.
8. Develop and maintain vulnerability dashboards, security metrics, executive reports, and risk scorecards to provide visibility into organizational security posture.
9. Establish, monitor, and improve vulnerability management processes, governance frameworks, and security controls across the enterprise.
10. Perform root cause analysis of recurring vulnerabilities and recommend preventive security measures to reduce future risk exposure.
11. Support audit, compliance, risk management, and regulatory requirements by providing vulnerability assessment data, remediation evidence, and security reporting.
12.



Utilize Python and automation techniques to streamline vulnerability correlation, reporting, remediation tracking, and operational efficiency.
13. Design, develop, or integrate AI, Machine Learning, and Generative AI capabilities within vulnerability management processes.
14. Implement AI/GenAI use cases for vulnerability prioritization, risk scoring, threat intelligence enrichment, remediation recommendations, report summarization, attack-path analysis, and security analytics.
15. Evaluate and validate AI-generated outputs to ensure accuracy, reliability, and compliance before operational deployment.
16. Establish governance and approval mechanisms to prevent unsafe recommendations, incorrect vulnerability classifications, and AI-generated security risks.
17. Work closely with cross-functional stakeholders to improve overall security posture through proactive vulnerability management and risk reduction initiatives.
18. Drive continuous improvement initiatives to enhance vulnerability detection, assessment quality, remediation effectiveness, reporting accuracy, and operational efficiency.

Technical Requirements Technology -> Application Security -> Vulnerability Management

- Vulnerability Management
- Vulnerability Assessment
- Penetration Testing (VAPT)
- SAST
- DAST
- OWASP Security Testing
- Risk Prioritization
- Vulnerability Remediation

Technology -> Security Tools

- HCL AppScan
- Nessus
- Nmap
- Kali Linux
- Burp Suite
- OWASP ZAP
- Metasploit

Technology -> Programming & Automation

- Python
- Security Automation
- Reporting Automation

Technology -> Artificial Intelligence

- Generative AI (GenAI)
- Artificial Intelligence (AI)
- Machine Learning (ML)
- LLM Integrations
- RAG Frameworks
- Azure OpenAI / Amazon Bedrock / Vertex AI

📌 FVM Vulnerability Management Specialist (Bengaluru)
🏢 Infosys
📍 Bengaluru