Vulnerability Management Engineer

3 days ago

Bengaluru, India Optiv Full time

How You'll Make An Impact :- Serve as a subject matter expert in vulnerability management, contributing in the design and execution of scanning, analysis, and remediation workflows across hybrid environments.- Collaborate with senior engineers, architects, and client stakeholders to deliver tailored vulnerability management solutions aligned with business and compliance requirements.- Drive risk-based vulnerability prioritization, leveraging threat intelligence, asset criticality, and exploitability data.- Lead enterprise-wide scanning initiatives, including authenticated scans across Windows, Linux, network devices, containers, and cloud platforms (AWS, Azure, GCP).- Administer and optimize tools such as Qualys, Tenable, Rapid7, Prisma Cloud, Wiz and Tanium to support continuous monitoring and patch management.- Utilize Tanium or other patch management tools to deploy patches, automate updates, and enforce configuration baselines across diverse endpoints.- Develop and maintain dashboards and reporting using tools like Power BI to track KPIs, remediation progress, and risk trends.- Define and implement vulnerability management KPIs, SLAs, and strategic goals in collaboration with leadership and clients.- Produce detailed documentation of assessments, threat analysis, and remediation plans.- Validate and track remediation efforts, ensuring closure of vulnerabilities and alignment with security policies.- Provide expert guidance on threat modeling, external attack surface management, and exposure analysis.- Act as a primary escalation point for zero-day vulnerabilities, patch-related incidents, coordinating with IT and engineering teams to resolve issues efficiently.What We're Looking For :- 6+ years of experience in vulnerability management, including hands-on administration of platforms like Qualys, Tenable, Rapid7, Prisma Cloud, Contrast, and Tanium.- Strong understanding of the vulnerability management lifecycle, including discovery, validation, prioritization, and remediation.- Experience with cloud-native scanning and container security in AWS, Azure, and GCP environments.- Proficiency in log analysis, TCP/IP networking, and endpoint telemetry to support threat investigations.- Demonstrated ability to automate workflows and integrate vulnerability data into enterprise data lakes and CMDBs.- Experience with external asset discovery, continuous monitoring, and attack surface management (ASM) tools.- Strong analytical and problem-solving skills, with the ability to translate technical findings into business risk.- Excellent communication skills and the ability to collaborate across technical and non-technical teams.- Experience building and maintaining dashboards and metrics in Power BI or similar tools.- Familiarity with security frameworks such as NIST, CIS, and MITRE ATT&CK is a plus.Preferred Certifications :- CISSP, CISM, CISA, or equivalent.- Vendor-specific certifications (e.g., Qualys, Tanium, Tenable, Wiz, CSPM etc.What You Can Expect From Optiv :- A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups.- Work/life balance.- Professional training resources.- Creative problem-solving and the ability to tackle unique, complex projects.- Volunteer Opportunities.- Optiv Chips In encourages employees to volunteer and engage with their teams and communities.- The ability and technology necessary to productively work remotely/from home (where applicable). (ref:hirist.tech)

  • Vulnerability Management Specialist

    2 weeks ago

    Bengaluru, India PURVIEW Full time

    We are seeking a skilled Vulnerability Management Specialist with hands-on experience in AWS environments and Wiz (cloud security posture management). The ideal candidate will be responsible for identifying, assessing, and remediating vulnerabilities across our cloud infrastructure, ensuring compliance with security best practices, and collaborating with...

  • Threat and Vulnerability Engineer

    5 days ago

    Bengaluru, Karnataka, India Commvault Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    Threat and Vulnerability Engineer: The Opportunity: We are seeking a highly motivated Threat and Vulnerability Engineer to join our Information Security team. This individual will be part of the people, processes and technologies involved in aiding the Global Security program's efforts to further the company's strategic positioning with regards to...

  • Vulnerability Management Analyst

    3 weeks ago

    Bengaluru, India Sampoorna Consultants Full time

    Job Description Role The role involves supporting the end to end vulnerability management (VM) service. The vulnerability management service helps defend KPMG and its clients by ensuring scans of KPMG information assets are performed and pro-actively managing vulnerabilities in conjunction with Enterprise wide and Technology engineering teams, in alignment...

  • Vulnerability Management Specialist

    3 days ago

    Bengaluru, Karnataka, India World Wide Technology Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Job Title: Vulnerability Management Specialist (AWS & Wiz)Client: HPENumber of Positions: 3Location: India, remote (candidate has to be local to Bangalore, no relo)Duration: 6+ monthsPosition OverviewWe are seeking a skilled Vulnerability Management Specialist with hands-on experience in AWS environments and Wiz (cloud security posture management).The ideal...

  • Cybersecurity Vulnerability

    2 weeks ago

    Bengaluru, Karnataka, India Triune Infomatics Inc Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    Role: Cybersecurity Vulnerability & Patch Management Engineer (India – U.S. Shift)Working Hours: Monday to Friday, 9 AM – 5 PM PST (U.S. Business Hours)Reporting To: Security Operations (SecOps) Leader – USARole Overview:We are hiring a skilled Cybersecurity Vulnerability Management Engineer based in India to support our U.S. Security Operations team....

  • Sigmasoft - Senior Firmware Vulnerability Management Engineer

    4 days ago

    Bengaluru, India Sigmasoft Full time

    Senior Firmware Vulnerability Management EngineerWe are seeking an experienced Senior Firmware Vulnerability Management Engineer to lead the identification, assessment, and mitigation of security vulnerabilities within firmware and embedded systems across our products and infrastructure. In this role, you will drive the development and implementation of...

  • Principal Engineer-Security engineering

    2 weeks ago

    Bengaluru, India Dell Full time

    Software Principal Engineer The Software Engineering team delivers next-generation application enhancements and new products for a changing world. Working at the cutting edge, we design and develop software for platforms, peripherals, applications and diagnostics — all with the most advanced technologies, tools, software engineering methodologies and the...

  • Infra Vulnerability Management

    2 weeks ago

    Bengaluru, Karnataka, India Cprime, Inc Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    In the Age of AI, Cprime reshapes operating models and rewires workflows to deliver enterprise transformation. We are your Intelligent Orchestration Partner, combining strategic consulting with industry-leading platforms to drive innovation, enhance efficiency, and shift your enterprise toward AI native thinking. For over 20 years, we've changed the way...

  • Threat and Vulnerability Engineer

    5 days ago

    Bengaluru, Karnataka, India Commvault Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Recruitment Fraud AlertWe've learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.What To KnowCommvault does not conduct interviews by email or text.We will never ask you to submit...

  • Threat and Vulnerability Engineer

    5 days ago

    Bengaluru, Karnataka, India Commvault Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Recruitment Fraud AlertWe've learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.  What to know:Commvault does not conduct interviews by email or text.We will never ask you to...