Full stack engineer with Vulnerability Management

• Full stack developer with experience in following areas, Java, Spring Boot, Maven, Node.js, NPM, React, CI/CD, JUNIT, Tosca, Litmus
• Strong experience in Vulnerability Management and enterprise remediation programs.
• Expertise in Cybersecurity Governance, Risk Management, and Compliance.
• Experience coordinating vulnerability remediation across:
• Middleware Platforms, Server/Platform Infrastructure, Databases, Applications, Cloud and On-Prem Environments
• Knowledge of enterprise vulnerability management tools such as Qualys, Tenable, Rapid7, ServiceNow Vulnerability Response.
• Experience managing remediation activities for BI and Analytics platforms: Tableau, MicroStrategy, Cognos, Power BI, TIBCO, Starburst

· Strong understanding of:

• CVSS Scoring, Security Risk Ratings, Patch Management, Vulnerability Lifecycle Management, Risk Acceptance / Exception Processes
• Experience with security governance reporting, audit support, and compliance requirements.
• Strong stakeholder management and cross-functional coordination skills.
• ServiceNow, Jira, Confluence
• ITIL Processes (Incident, Change, Problem Management)
• Enterprise Infrastructure & Platform Services
• Vendor Management
• Reporting & Dashboarding (Power BI, Excel)
• Process Improvement and Automation · Banking/Financial Services domain experience preferred

Roles & Responsibilities

• Lead end-to-end execution of enterprise vulnerability remediation initiatives.
• Coordinate remediation efforts across Infrastructure, Middleware, Database, Platform, Application, and Security teams.
• Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
• Drive closure of security vulnerabilities within enterprise-defined SLAs.
• Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.
• Partner with Information Security, GIS, Infrastructure Services, Database Services, Middleware Services, Application Support teams, and external vendors.

Track and report:

• Open vulnerabilities, Aging vulnerabilities, Compliance status, Risk exposure, Remediation progress
• Escalate overdue remediation activities, resource constraints, and critical risks.
• Ensure remediation activites meet audit, regulatory, and security compliance requirements.
• Maintain remediation evidence and documentation for audits and compliance reviews.
• Monitor vulnerability dashboards and ensure accuracy of governance metrics.
• Drive continuous improvement initiatives around remediation processes, governance, reporting, and automation.
• Act as the central point of contact between technology teams, security teams, leadership, and vendors.