Infrastructure Vulnerability Management Engineer

Description: Infrastructure Vulnerability Management Engineer:

Job Description:

3 to 6 years technical expert in c. Extensive experience in managing and mitigating infrastructure vulnerabilities, with a strong background in using Microsoft Defender for Endpoint and ServiceNow tools.
NP : Immediate - 15 days

Expertise:

• Good technical understanding of infrastructure vulnerabilities.
  • Ability to interact with project/program/IT teams in balancing security needs.
  • Lead various activities in vulnerability management program including planning, execution, reporting of infrastructure vulnerabilities.
  • Maintain scanning solution infrastructure and strategic roadmap.
  • As business needs evolve, lead the strategic planning and ideation of security tools that aid in the objectives to manage IT security risk to systems and software.
  • Configure, schedule, and perform automated vulnerability/compliance scanning on both DT external and internal infrastructure hosted applications in on-prem/cloud.
  • Own and manage entire vulnerability lifecycle from discovery to remediation.
  • Create vulnerability reports and communicate to the asset owners/operation teams.
  • Prioritize and guide remediation efforts and track vulnerabilities to closure.
  • Maintain environment documentation through the tools lifecycle as well as operational procedures with service suppliers.
  

Preferred Skills:

• Min 3+ years of experience of in enterprise vulnerability scanning tools such as MS defender or Tenable or Qualys.
  • Good technical understanding of infrastructure vulnerabilities.
  • Min 3+ years’ experience leading/Handling vulnerability management program for large enterprises
  • Experience in managing risk in a shared services/data centre/cloud environment with proven results in reduction/management of risk.
  • Effectively and persuasively communicates security risks in business terms.
  • Takes initiative to remain up to date with information security skills and fosters and attitude of continual learning / adapting.
  • Strong analytical skills with an emphasis on fact-based reporting/summaries using technologies.
  • Good time management and attention to details.
  • Relevant cyber security certifications along with Project management skills.