Vulnerability Management

• Experience:: 8+ years

Program management experience in a Infrastructure, Application and Cloud computing platform is required.

Fundamental understanding of Operating Systems Windows, Linux, VMware, Appliances and Network & Security components.

Good technical aptitude, problem solving and ability to quickly learn and master new topics and domains.

10+ years of related experience, specifically in Vulnerability Management, IT Operations, Security Operations and Risk management.

Knowledge and experience with Coordinated Vulnerability Disclosure (CVD), Common Vulnerability Scoring System (CVSS), MITRE Common Vulnerabilities and Exposures (CVE) systems, and OWASP Top 10.

Knowledge on various Vulnerability Scanning & Management and reporting tools (Tenable, Qualys, Archer.. etc.)

Proven record in vulnerability management & remediation.

Tenable (Nessus) vulnerability management tool and Archer experience.

Ability to apply Risk based approach while working on assigned responsibilities.

Bachelor's degree in computer science, Management Information Systems, Information Systems, or a related field/experience is required.

Must Have:

Infrastructure Operations experience.

Very good hands-on experience in Dashboards and reporting.

Hands on experience in Power BI dashboards, PPT & Pivot reporting skills.

Good understanding on SCCM & Redhat Sattlite patch/software remediation process and deployments.

Understanding on Windows, Linux, VMware, network, security Vas.

Very good experience in VA remediations on different OS platforms.

Good knowledge in maintain the server Inventory and knowledge in getting reports from CMDB tools.

Must have knowledge in VA Scanning & reporting tools.

Must have good knowledge in Change/Release Management process.

Key Responsibilities:

Vulnerability Management and Remediation engineer is an individual role within the Infrastructure Operations team and will be responsible for owning the Vulnerability and Remediation Management. The ideal candidate will have experience in managing end to end vulnerability remediation activities in an enterprise.

Focal point of contact for Vulnerability Management and related topics- a go-to person for consultation regarding the vulnerabilities identified by the tool. Guide & assist Infrastructure/Application teams to remediate the vulnerabilities identified under their application/infrastructure scope.

Person will be responsible preparing the Vulnerability Management Plan and the execution plan through all the phases of Vulnerability Management Lifecycle. Ensures that the Vulnerability scans are scheduled, configured in tool and are executed as per the schedule. Any failure of scans is to be investigated and schedule to re-run.

Conducts periodical discovery of IT Assets and ensures that identified assets are highlighted to Infra SDM and onboards the new asset in Vulnerability Management tool.

Assess the identified vulnerabilities and study & understand the risk profile, impact as per environmental context.

Lead the discussions with Infrastructure and Application teams and advise them the relevance of vulnerability and help them understand the impact.

Understand the false positives reported and the technical limitations of the environment and facilitate the process of Risk Acceptance.Person will be responsible to liaise with various stakeholders for proposing and maintaining the approvals for such cases.

Collaborate with Infrastructure teams- Windows, Unix, Networks and Cloud etc. for the remediation of the identified vulnerabilities.

Maintain the Vulnerability Dashboard for the scope and submits reports both of technical teams and Management Reporting.

Prepare Vulnerability Management dashboards & demonstrate the reports with various filters applied, like Unique Host's, Unique IP addresses, Unique VA's, Critical, High, Medium, Low etc.