Job Description

Area(s) of responsibility

Job description for Vulnerability Management – Functional/ Technical skills are as below:

Must have Functional/ Technical Skills.

At least 5 years of experience in Vulnerability Management Program.

Excellent communication and coordination skills.

Security Certifications preferred.

Functional Skills:

Roles & Responsibilities:

· Working on Vulnerability Management Program focused on ensuring that vulnerabilities within the organization are quickly identified, triaged, tracked, and appropriately remediated.

· Working with cross-functional, global stakeholders to drive remediation programs and ensure proper remediation of vulnerabilities till closure.

· Working on various vulnerability scanning reports- Assessing, validating, and triaging vulnerabilities- Ensure organizational vulnerabilities are property documented, tracked, and addressed.

· Working closely with internal stakeholders & Infosec team to address reported vulnerabilities to ensure timely remediation or approved exception and ad-hoc scan.

· Clearly advises stakeholders and technical teams on vulnerabilities, criticality, impacts, and remediation to meet information security standards.

· Develops remediation reports, out briefs, and scorecards addressing risk, vulnerability, and organizational progress.

· Providing regular reports and updates to senior management on the status of the vulnerability management program, including progress on remediation efforts and any critical vulnerabilities requiring immediate attention.

· Working on all other Security, Risk & Compliance issues within the Organization.

· Experience in IT, Cybersecurity, Risk/Vulnerability Analysis or Management, or related fields.

· Strong knowledge of vulnerability management processes, tools, best practices, and vulnerability validation and triaging.

· Experience with industry-standard enterprise vulnerability scanning offerings, such as Qualys, Nexus IQ, Fortify, Key-light, Datamart/Power BI, Splunk etc.

· Vulnerability Management experience within containerization platforms (Docker, Kubernetes, etc.) and major cloud environments (AWS, Azure etc.)- Container vulnerabilities.

· Familiar with security frameworks and standards, such as PCI DSS, NIST, ISO 27001, OWASP Top 10, or Critical Security Controls.

· Good to have Audit experience and working with internal/External auditors (PCI DSS, FRB, OCC etc.)

Technical Skills:

Required skills

· Good to have – Vulnerability Management and AI.

· Knowledge of modern, risk-based vulnerability management practices.

· Experience with Vulnerability automation, dashboards, reporting, and workflow integration using any AI tools.

· Basic understanding of GenAI capabilities and their application in Vulnerability Management for analysis, prioritization, reporting, and automation.

· Hands-on knowledge of AI tools such as GitHub Copilot, ChatGPT, Microsoft Copilot, or similar tools for scripting, data analysis, and process automation.

· Exposure to AI agents/agentic workflows and how they can be leveraged to automate vulnerability triage, enrichment, remediation tracking, and reporting.

· Basic ability to develop or leverage AI-powered agents/automation, python scripting for cybersecurity or Vulnerability Management use cases is an added advantage.