About this role
Area(s) of responsibility
.
Job description for Vulnerability Management – Functional/ Technical skills are as below:
Must have Functional/ Technical Skills.
At least 5 years of experience in Vulnerability Management Program.
Excellent communication and coordination skills.
Security Certifications preferred.
Functional Skills:
Roles & Responsibilities:
· Working on Vulnerability Management Program focused on ensuring that vulnerabilities within the organization are quickly identified, triaged, tracked, and appropriately remediated.
· Working with cross-functional, global stakeholders to drive remediation programs and ensure proper remediation of vulnerabilities till closure.
· Working on various vulnerability scanning reports- Assessing, validating, and triaging vulnerabilities- Ensure organizational vulnerabilities are property documented, tracked, and addressed.
· Working closely with internal stakeholders & Infosec team to address reported vulnerabilities to ensure timely remediation or approved exception and ad-hoc scan.
· Clearly advises stakeholders and technical teams on vulnerabilities, criticality, impacts, and remediation to meet information security standards.
· Develops remediation reports, out briefs, and scorecards addressing risk, vulnerability, and organizational progress.
· Providing regular reports and updates to senior management on the status of the vulnerability management program, including progress on remediation efforts and any critical vulnerabilities requiring immediate attention.
· Working on all other Security, Risk & Compliance issues within the Organization.
· Experience in IT, Cybersecurity, Risk/Vulnerability Analysis or Management, or related fields.
· Strong knowledge of vulnerability management processes, tools, best practices, and vulnerability validation and triaging.
· Experience with industry-standard enterprise vulnerability scanning offerings, such as Qualys, Nexus IQ, Fortify, Key-light, Datamart/Power BI, Splunk etc.
· Vulnerability Management experience within containerization platforms (Docker, Kubernetes, etc.) and major cloud environments (AWS, Azure etc.)- Container vulnerabilities.
· Familiar with security frameworks and standards, such as PCI DSS, NIST, ISO 27001, OWASP Top 10, or Critical Security Controls.
· Good to have Audit experience and working with internal/External auditors (PCI DSS, FRB, OCC etc.)
Technical Skills:
Required skills
· Good to have – Vulnerability Management and AI.
· Knowledge of modern, risk-based vulnerability management practices.
· Experience with Vulnerability automation, dashboards, reporting, and workflow integration using any AI tools.
· Basic understanding of GenAI capabilities and their application in Vulnerability Management for analysis, prioritization, reporting, and automation.
· Hands-on knowledge of AI tools such as GitHub Copilot, ChatGPT, Microsoft Copilot, or similar tools for scripting, data analysis, and process automation.
· Exposure to AI agents/agentic workflows and how they can be leveraged to automate vulnerability triage, enrichment, remediation tracking, and reporting.
· Basic ability to develop or leverage AI-powered agents/automation, python scripting for cybersecurity or Vulnerability Management use cases is an added advantage.