Infrastructure Vulnerability Management Engineer

2 weeks ago


Gurugram, India Aceseekers Full time

Location - Hyderabad, Mumbai, Bangalore, Gurgaon, Chennai, Pune, Kolkata (Hybrid Mode)

Total Experience - 5 Years

Relevant Experience - 3-8 Years

Shift Timing - 11AM - 8PM

Primary skills - vulnerability & assessment management, VM implementation, CIS Baseline.

tools like rapid 7 , tenable , qualys guard ( certifications are added advantage )

Certifications - CISSP ( Certified information system security professional ) - good to have

Client facing role

Work you'll do :

As an Attack Surface Management Senior Consultant, you will assist our clients with discovering vulnerabilities and rogue assets (such as shadow IT) in their networks as part of a team of engineers and analysts around the world who specialize in the tactics, tools and procedures used by cyber criminals.

1. Configure and execute vulnerability scans enumerating vulnerabilities within the internal and external network

2. Analyze, enrich, and prioritize specific activities designed to remediate discovered vulnerabilities such as patch deployment or configuration hardening

3. Assist in producing a comprehensive operating picture and cyber security situational awareness

4. Work with various vulnerability threat feeds (such as vendor bulletins), assessment tools, asset inventory tools as well as reporting tools and frameworks to match assets to identified vulnerabilities and produce reports

5. Respond to requests for ad-hoc reporting and research topics from management and analysts as required

6. Identify gaps in available asset information and engage with leadership on strategies to meet service-level requirements through affirmative handoff with remediation partners

7. Quickly understand and deliver on company and customer requirements

8. Aid in and participate in daily, weekly, quarterly, and yearly reporting for clients, partners, and internal teams

9. Adhere to internal operational security and policies

Qualifications Required :

1. Bachelor's degree or higher in Attack Surface Management, Information Security, Information Technology, Computer Science, Math, or any other related area

2. 3-7 years of experience working in information technology vulnerability management, information security, incident response, red team operations, application security, reverse engineering, or other technical cyber security roles

3. Certified Information Systems Security Professional (CISSP), Certification in Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Ethical Hacker (CEH) or equivalent

4. Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.

5. Understanding of common network infrastructure devices such as routers and switches

6. Understanding of basic networking protocols such as TCP/IP, DNS, HTTP

7. Understanding of vulnerability classification using National Vulnerability Database nomenclature such as CVE/CVSS

8. Basic knowledge in system security architecture and security solutions

Preferred :

1. Proven ability to translate complex information sets into specific recommendations that can be actioned by customers to enhance their security posture

2. Familiarity with cyber threats, defenses, motivations, and techniques

3. Experience with vulnerability analysis tools such as Qualys or Tenable, and the asset provisioning/deprovisioning lifecycle

4. Patch management skills and technology application such as Microsoft System Center Configuration Manager (SCCM)

5. Experience distilling raw information into actionable intelligence

6. Outstanding English written and oral communication skills and the ability to prioritize work

7. Strong understanding of threat analysis and enterprise level, mitigation strategies

8. Working knowledge of how malicious code operates and how technical vulnerabilities are exploited

9. Strong knowledge of operating systems and networking technologies in general

10. Strong knowledge of databases, query design, and how to analyze data thus obtained

11. Knowledge of supporting toolsets such as Confluence, Jira, and Configuration Management Databases (CMDB) such as ServiceNow

12. Strong analytical and problem-solving skills

13. Self-motivated to improve knowledge and skills

14. A strong desire to understand the what as well as the why and the how of security incidents

(ref:hirist.tech)

  • gurugram, India Aceseekers Full time

    Location - Hyderabad, Mumbai, Bangalore, Gurgaon, Chennai, Pune, Kolkata (Hybrid Mode)Total Experience - 5 YearsRelevant Experience - 3-8 YearsShift Timing - 11AM - 8PMPrimary skills - vulnerability & assessment management, VM implementation, CIS Baseline.tools like rapid 7 , tenable , qualys guard ( certifications are added advantage )Certifications - CISSP...


  • Hyderabad/Mumbai/Bangalore/Chennai/Pune/Gurgaon/Gurugram/Kolkata, India Aceseekers Full time

    Location - Hyderabad, Mumbai, Bangalore, Gurgaon, Chennai, Pune, Kolkata (Hybrid Mode)Total Experience - 5 YearsRelevant Experience - 3-8 YearsShift Timing - 11AM - 8PMPrimary skills - vulnerability & assessment management, VM implementation, CIS Baseline.tools like rapid 7 , tenable , qualys guard ( certifications are added advantage )Certifications - CISSP...


  • Hyderabad/Mumbai/Bangalore/Chennai/Pune/Gurgaon/Gurugram/Kolkata, IN Aceseekers Full time

    Location - Hyderabad, Mumbai, Bangalore, Gurgaon, Chennai, Pune, Kolkata (Hybrid Mode)Total Experience - 5 YearsRelevant Experience - 3-8 YearsShift Timing - 11AM - 8PMPrimary skills - vulnerability & assessment management, VM implementation, CIS Baseline.tools like rapid 7 , tenable , qualys guard ( certifications are added advantage )Certifications - CISSP...


  • gurugram, India Genpact Full time

    Genpact (NYSE: G) is a global professional services and solutions firm delivering outcomes that shape the future. Our 125,000+ people across 30+ countries are driven by our innate curiosity, entrepreneurial agility, and desire to create lasting value for clients. Powered by our purpose – the relentless pursuit of a world that works better for people –...


  • Gurugram, India Genpact Full time

    Genpact (NYSE: G) is a global professional services and solutions firm delivering outcomes that shape the future. Our 125,000+ people across 30+ countries are driven by our innate curiosity, entrepreneurial agility, and desire to create lasting value for clients. Powered by our purpose – the relentless pursuit of a world that works better for people –...

  • Lead Engineer

    4 weeks ago


    gurugram, India Silverskills Private Limited Full time

    Job Description of the role : - Leads the implementation and delivery of VA/PT tools and services for our global clients.Responsibilities : - Daily assessment of vulnerabilities identified by infrastructure scan.- Assist in the responsibility for the reviewing vulnerabilities' data from multiple sources (i.e., external / internal penetration testing,...

  • Lead Engineer

    4 weeks ago


    Gurugram, India Silverskills Private Limited Full time

    Job Description of the role : - Leads the implementation and delivery of VA/PT tools and services for our global clients.Responsibilities :- Daily assessment of vulnerabilities identified by infrastructure scan.- Assist in the responsibility for the reviewing vulnerabilities' data from multiple sources (i.e., external / internal penetration testing,...


  • gurugram, India Milliman Full time

    Job Summary: We are seeking a highly skilled Vulnerability Assessment and Penetration Testing (VAPT) Analyst in a GCS India IT team with a minimum of 4 years of experience in the Application Security field. The ideal candidate will possess a comprehensive understanding of application penetration testing, secure Software Development Life Cycle (SDLC)...


  • Gurugram, India Milliman Full time

    Job Summary: We are seeking a highly skilled Vulnerability Assessment and Penetration Testing (VAPT) Analyst in a GCS India IT team with a minimum of 4 years of experience in the Application Security field. The ideal candidate will possess a comprehensive understanding of application penetration testing, secure Software Development Life Cycle (SDLC)...

  • Security Architect

    6 days ago


    gurugram, India Egon Zehnder - Knowledge Center India Full time

    Egon Zehnder is trusted partner to many of the world's most respected organizations and is a leading leadership advisory firm, with more than 560+ consultants and 63 offices in 36 countries spanning Europe, the Americas, Asia Pacific, the Middle East and Africa. Our clients range from the largest corporations to emerging growth companies, government and...

  • Security Architect

    6 days ago


    Gurugram, India Egon Zehnder - Knowledge Center India Full time

    Egon Zehnder is trusted partner to many of the world's most respected organizations and is a leading leadership advisory firm, with more than 560+ consultants and 63 offices in 36 countries spanning Europe, the Americas, Asia Pacific, the Middle East and Africa. Our clients range from the largest corporations to emerging growth companies, government and...


  • gurugram, India Cvent Full time

    Overview: Cvent is a leading meetings, events, and hospitality technology provider with more than 4,800 employees and ~22,000 customers worldwide, including 53% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special...


  • gurugram, India Michael Page Full time

    An opportunity to work with one of the largest Asset Management Companies Learn and Grow exponentially About Our Client Client is a global investment manager, specializing in alternative investments across private equity, real estate, credit, absolute return strategies, GP stakes, infrastructure, and insurance asset management. Job...

  • Lead Engineer

    4 weeks ago


    Gurgaon/Gurugram, India Silverskills Private Limited Full time

    Job Description of the role : - Leads the implementation and delivery of VA/PT tools and services for our global clients.Responsibilities : - Daily assessment of vulnerabilities identified by infrastructure scan.- Assist in the responsibility for the reviewing vulnerabilities' data from multiple sources (i.e., external / internal penetration...

  • Lead Engineer

    1 month ago


    Gurgaon/Gurugram, IN Silverskills Private Limited Full time

    Job Description of the role : - Leads the implementation and delivery of VA/PT tools and services for our global clients.Responsibilities :- Daily assessment of vulnerabilities identified by infrastructure scan.- Assist in the responsibility for the reviewing vulnerabilities' data from multiple sources (i.e., external / internal penetration testing,...

  • Security Architect

    6 days ago


    Gurgaon/Gurugram, India Egon Zehnder - Knowledge Center India Full time

    Egon Zehnder is trusted partner to many of the world's most respected organizations and is a leading leadership advisory firm, with more than 560+ consultants and 63 offices in 36 countries spanning Europe, the Americas, Asia Pacific, the Middle East and Africa. Our clients range from the largest corporations to emerging growth companies, government and...

  • Security Architect

    2 hours ago


    Gurgaon/Gurugram, IN Egon Zehnder - Knowledge Center India Full time

    Egon Zehnder is trusted partner to many of the world's most respected organizations and is a leading leadership advisory firm, with more than 560+ consultants and 63 offices in 36 countries spanning Europe, the Americas, Asia Pacific, the Middle East and Africa. Our clients range from the largest corporations to emerging growth companies, government and...

  • Senior DevOps Engineer

    2 months ago


    gurugram, India HT Media Full time

    Job Description : We are currently seeking a highly skilled and experienced Senior DevOps/Infrastructure Engineer to join our dynamic team. As a key member of our technology department, you will play a crucial role in designing and implementing scalable, efficient and robust infrastructure solutions with a strong focus on DevOps automation and best...


  • Gurugram, India HT Media Full time

    Job Description :We are currently seeking a highly skilled and experienced Senior DevOps/Infrastructure Engineer to join our dynamic team. As a key member of our technology department, you will play a crucial role in designing and implementing scalable, efficient and robust infrastructure solutions with a strong focus on DevOps automation and best...


  • Gurugram, India Cvent Full time

    Overview:Cvent is a leading meetings, events, and hospitality technology provider with more than 4,800 employees and ~22,000 customers worldwide, including 53% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special event...