Vulnerability Management

Skill: Vulnerability Management

Level of Hiring: 3 to 5 yrs

Location: Pune / Bangalore

JD :

Vulnerability Mgmt.

Job Summary:

We are seeking a motivated and detail-oriented Vulnerability Management Analyst with 2 years of hands-on experience in identifying, assessing, and managing vulnerabilities across enterprise environments. The ideal candidate will support the organization's security posture by ensuring timely detection, prioritization, and remediation of vulnerabilities.

Key Responsibilities:

• Perform regular vulnerability scans using tools like Qualys, Tenable, Rapid7, or Nessus.
• Analyze scan results, validate findings, and work with IT teams to prioritize and remediate vulnerabilities.
• Track and report on vulnerability remediation progress and compliance metrics.
• Collaborate with infrastructure, application, and cloud teams to ensure secure configurations.
• Maintain and update vulnerability management policies, procedures, and documentation.
• Monitor threat intelligence feeds and correlate with internal vulnerabilities.
• Support patch management efforts and coordinate with relevant stakeholders.
• Assist in internal and external audits related to vulnerability management.
• Participate in security incident response when vulnerabilities are exploited.

Required Skills & Qualifications:

• Bachelors degree in Computer Science, Information Security, or related field.
• 2 years of experience in vulnerability management or related cybersecurity role.
• Familiarity with vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7).
• Understanding of CVSS scoring, OWASP Top 10, and common vulnerability types.
• Basic knowledge of operating systems (Windows, Linux), networking, and cloud platforms.
• Strong analytical and problem-solving skills.
• Good communication and documentation abilities.

Preferred Qualifications:

• Security certifications such as CompTIA Security+, CEH, or similar.
• Experience with SIEM tools and threat intelligence platforms.
• Exposure to regulatory frameworks (e.g., ISO 27001, NIST, GDPR).