Infrastructure Vulnerability Management Engineer:

Job Description:

3 to 6 years’ technical expert in Infrastructure Vulnerability Management. Extensive experience in managing and mitigating infrastructure vulnerabilities, with a strong background in using Microsoft Defender for Endpoint and ServiceNow tools.

Expertise:

• Good technical understanding of infrastructure vulnerabilities.
• Ability to interact with project/program/IT teams in balancing security needs.
• Lead various activities in vulnerability management program including planning, execution, reporting of infrastructure vulnerabilities.
• Maintain scanning solution infrastructure and strategic roadmap.
• As business needs evolve, lead the strategic planning and ideation of security tools that aid in the objectives to manage IT security risk to systems and software.
• Configure, schedule, and perform automated vulnerability/compliance scanning on both DT external and internal infrastructure hosted applications in on-prem/cloud.
• Own and manage entire vulnerability lifecycle from discovery to remediation.
• Create vulnerability reports and communicate to the asset owners/operation teams.
• Prioritize and guide remediation efforts and track vulnerabilities to closure.
• Maintain environment documentation through the tools’ lifecycle as well as operational procedures with service suppliers.



Preferred Skills:

• Min 3+ years of experience of in enterprise vulnerability scanning tools such as MS defender or Tenable or Qualys.
• Good technical understanding of infrastructure vulnerabilities.
• Min 3+ years’ experience leading/Handling vulnerability management program for large enterprises
• Experience in managing risk in a shared services/data centre/cloud environment with proven results in reduction/management of risk.
• Effectively and persuasively communicates security risks in business terms.
• Takes initiative to remain up to date with information security skills and fosters and attitude of continual learning / adapting.
• Strong analytical skills with an emphasis on fact-based reporting/summaries using technologies.
• Good time management and attention to details.
• Relevant cyber security certifications along with Project management skills.