Specialist- Vulnerability Management

Job description

**Job Title:** **Specialist – Vulnerability Management (Infrastructure Security)** **Experience:** - Total Experience: Not more than 5 years - Relevant/Core Experience: 2–4 years in Vulnerability Management / Infrastructure Security **Role Overview:** We are looking for a skilled Vulnerability Management professional with strong hands-on experience in infrastructure security (servers, databases, network devices, and security systems). The role demands a 70% technical focus and 30% reporting & coordination, ensuring end-to-end vulnerability lifecycle management—from identification to remediation and closure. **Key Responsibilities:** **1. Vulnerability Assessment & Analysis** - Perform vulnerability scans across servers, databases, network devices, and security appliances - Use tools like Qualys, Nessus for automated scanning and validation - Conduct manual validation for false positives and configuration weaknesses - Prioritize vulnerabilities based on CVSS, risk impact, and business criticality **2. Remediation & System Hardening** - Drive remediation activities with IT Infra, application, and platform teams - Provide remediation guidance, patch advisory, and system hardening recommendations - Track remediation SLAs and ensure closure within defined timelines - Perform verification scans and validate closure of vulnerabilities **3. Reporting & Governance** - Prepare vulnerability reports, dashboards, and metrics for management review - Publish periodic reports (weekly/monthly) with status, trends, etc. - Highlight critical risks, overdue items, and escalation points - Support audits, compliance reviews, and regulatory requirements **Required Skills & Qualifications:** **Technical Skills:** - Strong understanding of Infrastructure Security (OS, DB, Network, Security devices) - Hands-on experience in Qualys / Nessus / similar vulnerability scanners - Knowledge of patch management, system hardening, and secure configurations - Familiarity with CVSS, OWASP Top 10, SANS Top 25 frameworks **Other Skills:** - Strong analytical and problem-solving skills - Ability to work with cross-functional teams - Good communication and reporting skills **Preferred Qualifications:** - Certifications like CEH, Security+, or equivalent (optional)