Description

What You'll Do:

• Vulnerability Identification  Assessment
• Perform regular vulnerability scans across infrastructure, cloud, endpoints, applications, and network devices
• Validate scan results to eliminate false positives
• Enrich findings using CVSS, exploit availability, CISA KEV, asset criticality, and internet exposure
• Track vulnerabilities throughout their lifecycle from detection to closure
• Risk
• Based Prioritization
• Prioritize vulnerabilities based on business risk, not just severity
• Integrate context such as: Asset criticality
• Data sensitivity
• Exploit maturity (Po
• C / In-the-wild)
• External exposure
• Support shift from volumebased to riskdriven remediation
• Remediation  Coordination
• Work closely with IT, Cloud, Infrastructure, App, and DevOps teams
• Assign remediation actions and track SLAs
• Support patching, configuration hardening, and compensating controls
• Validate fixes and perform rescans Reporting  Governance
• Create dashboards and reports for: Vulnerability trends
• SLA adherence
• Risk reduction metrics
• Support executive, audit, and compliance reporting
• Maintain vulnerability standards, procedures, and playbooks
• Automation  Tooling (Preferred)
• Drive automation using SOAR / scripting / APIs
• Integrate vulnerability data with CMDB, ticketing, and SOC tools
• Support AIdriven or advanced analytics initiatives (where applicable)

Expertise You'll Bring:

• Experience
• Technical Skills
• Strong understanding of vulnerability management frameworks
• Handson experience with tools such as: Tenable, Qualys, Rapid7, Microsoft Defender VMWiz / Prisma Cloud / Azure Defender (cloud)
• Solid knowledge of: Windows, Linux, Network, Cloud (Azure/AWS/GCP)
• CVSS, CWE, OWASP Top 10
• Understanding of patch management and system hardening
• Analytical  Communication Skills
• Strong risk analysis and problemsolving capability
• Ability to explain risk to technical and nontechnical stakeholders
• Excellent documentation and reporting skills
•  

Education: Bachelor?s or Master?s degree in Computer Science, Engineering, or a related field

Key Skills

Education

Any Graduate