Vulnerability Management Engineer

Vulnerability Management Engineer

Job Summary We are looking for a Vulnerability Management Engineer with 3 –7 years of experience to support enterprise vulnerability management operations. The role involves vulnerability scanning, assessment, remediation tracking, reporting, and collaboration with infrastructure and security teams. Hands-on experience with Tenable, Rapid7/InsightVM, Tanium , and vulnerability remediation processes is essential.

Key Responsibilities

• Execute scheduled and on-demand vulnerability scans using Tenable and Rapid7/InsightVM.
• Analyse scan results, validate vulnerabilities, prioritise risks, and eliminate false positives.
• Create and track remediation tickets with detailed vulnerability information and remediation guidance.
• Coordinate with infrastructure and patch management teams to ensure timely remediation.
• Monitor vulnerability SLAs, ageing, remediation progress, and recurring issues.
• Support risk and exception management using TruOps or similar GRC platforms.
• Correlate vulnerability findings with CrowdStrike and SentinelOne endpoint security data.
• Assist in reviewing identity and privileged access vulnerabilities involving Okta and CyberArk.
• Prepare operational reports, dashboards, and remediation status updates.
• Validate remediated vulnerabilities through re-scans and maintain documentation.
• Participate in client and internal review meetings during US business hours.

Requirements Job Requirements Required Skills & Experience

• 3–7 years of experience in Vulnerability Management, Cybersecurity, Security Operations, or Infrastructure Security.
• Hands-on experience with Tenable, Rapid7/InsightVM, vulnerability assessment, CVE/CVSS analysis, and remediation tracking.
• Experience with Tanium, ServiceNow or Jira, and reporting tools.
• Good understanding of patch management, endpoint security, and security best practices.
• Experience working with global or US-based customers is preferred.

Tools & Technologies

• Vulnerability Management: Tenable, Rapid7/InsightVM
• Patch Management: Tanium, Automox
• GRC: TruOps, Cyberfusion
• IAM/PAM: Okta, CyberArk
• Endpoint Security: CrowdStrike, SentinelOne
• Ticketing & Reporting: ServiceNow, Jira, Power BI, Excel

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Preferred certifications: CompTIA Security+, CySA+, CEH, Tenable, Rapid7, ITIL Foundation, or equivalent.