Vulnerability Management

Job description

Job description for Vulnerability Management – Functional/ Technical skills are as below: Must have Functional/ Technical Skills. At least 5 years of experience in Vulnerability Management Program. Excellent communication and coordination skills. Security Certifications preferred. Functional Skills: Roles & Responsibilities: · Working on Vulnerability Management Program focused on ensuring that vulnerabilities within the organization are quickly identified, triaged, tracked, and appropriately remediated. · Working with cross-functional, global stakeholders to drive remediation programs and ensure proper remediation of vulnerabilities till closure. · Working on various vulnerability scanning reports- Assessing, validating, and triaging vulnerabilities- Ensure organizational vulnerabilities are property documented, tracked, and addressed. · Working closely with internal stakeholders & Infosec team to address reported vulnerabilities to ensure timely remediation or approved exception and ad-hoc scan. · Clearly advises stakeholders and technical teams on vulnerabilities, criticality, impacts, and remediation to meet information security standards. · Develops remediation reports, out briefs, and scorecards addressing risk, vulnerability, and organizational progress. · Providing regular reports and updates to senior management on the status of the vulnerability management program, including progress on remediation efforts and any critical vulnerabilities requiring immediate attention. · Working on all other Security, Risk & Compliance issues within the Organization. · Experience in IT, Cybersecurity, Risk/Vulnerability Analysis or Management, or related fields. · Strong knowledge of vulnerability management processes, tools, best practices, and vulnerability validation and triaging. · Experience with industry-standard enterprise vulnerability scanning offerings, such as Qualys, Nexus IQ, Fortify, Key-light, Datamart/Power BI, Splunk etc. · Vulnerability Management experience within containerization platforms (Docker, Kubernetes, etc.) and major cloud environments (AWS, Azure etc.)- Container vulnerabilities. · Familiar with security frameworks and standards, such as PCI DSS, NIST, ISO 27001, OWASP Top 10, or Critical Security Controls. · Good to have Audit experience and working with internal/External auditors (PCI DSS, FRB, OCC etc.) Technical Skills: Required skills · Good to have – Vulnerability Management and AI. · Knowledge of modern, risk-based vulnerability management practices. · Experience with Vulnerability automation, dashboards, reporting, and workflow integration using any AI tools. · Basic understanding of GenAI capabilities and their application in Vulnerability Management for analysis, prioritization, reporting, and automation. · Hands-on knowledge of AI tools such as GitHub Copilot, ChatGPT, Microsoft Copilot, or similar tools for scripting, data analysis, and process automation. · Exposure to AI agents/agentic workflows and how they can be leveraged to automate vulnerability triage, enrichment, remediation tracking, and reporting. · Basic ability to develop or leverage AI-powered agents/automation, python scripting for cybersecurity or Vulnerability Management use cases is an added advantage. Please share resume suchi.srivastava@birlasoft.com