Senior Security Engineer

Hi Job Seeker,

We have an open position for Vulnerability and Security Engineer role (Senior) at Hyderabad location, for more details about organization and job details, refer to below link:

About Company: We, Gemini Consulting and Services is a leading Software Development based company, located at US, India and UAE.

https://www.gemini-us.com/

• Work Location: Financial District, Hyderabad
• Mode of Work: 5 days from office until probation period of 6 months and later, it is Hybrid.
• Project Type: US Based.
• Employment Type: Full time role.
• Shift Hours: Rotational 2 to 10 PM IST(from office) and Night Shift (remote).

Job Title: Vulnerability Management & Security Operations SpecialistExperience: 5+ Years

Job Overview:
We are looking for an experienced security professional with strong hands-on experience in vulnerability assessment and vulnerability management. The candidate should be capable of analyzing and validating security scan results, performing risk-based prioritization beyond basic severity ratings, defining remediation strategies, and driving vulnerability remediation across multiple technical teams.The role requires strong knowledge of endpoint security, cloud environments, Windows and Linux operating systems, networking, and basic application security, along with hands-on experience with vulnerability management and security tools.
Key Responsibilities:

• Own and manage the end-to-end vulnerability management lifecycle, from identification and validation through remediation and closure.
• Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud environments, networks, and applications.
• Analyze and validate vulnerability scan results, including identifying false positives and determining actual exposure.
• Perform risk-based vulnerability prioritization considering factors beyond CVSS/severity, including asset criticality, business impact, exploitability, exposure, and active exploitation.
• Investigate vulnerabilities across Windows and Linux environments and coordinate appropriate remediation activities.
• Assess security vulnerabilities across cloud and endpoint environments.
• Define technical remediation and mitigation steps and work with relevant teams to implement them.
• Document technical findings, evidence, risk, business impact, and recommended remediation actions.
• Drive vulnerability remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams.
• Track remediation progress and ensure vulnerabilities are addressed within defined remediation SLAs.
• Perform remediation validation through re-scanning, technical verification, or other appropriate methods.
• Support endpoint security and vulnerability management activities using relevant security platforms.
• Maintain the vulnerability dashboards, reports, remediation status, and risk documentation.
• Provide regular updates to security and business stakeholders regarding critical findings, remediation progress, exceptions, and outstanding risks.
• Support investigation and response activities for critical or actively exploited vulnerabilities, including zero-day vulnerabilities when required.

Required Qualifications:

• 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or a related security domain.
• Hands-on experience in vulnerability assessment and vulnerability management.
• Strong understanding of risk assessment and risk-based vulnerability prioritization, beyond simply relying on CVSS/severity ratings.
• Ability to analyze, investigate, and validate vulnerability scan results.
• Strong knowledge of endpoint security and vulnerability remediation.
• Good understanding of Windows and Linux operating systems from a security perspective.
• Working knowledge of networking and network security fundamentals.
• Understanding basic application security and common application vulnerabilities.

Experience working with some of the following security technologies/tools:

• Wiz
• CrowdStrike
• Nexpose / Rapid7
• Splunk
• AppSpider
• ServiceNow

Ability to document technical security findings and define appropriate remediation/mitigation steps.Demonstrated experience driving remediation activities across multiple technical teams.Strong communication, stakeholder management, ownership, and follow-up skills.
Preferred Qualifications:

• Experience in Security Operations (SecOps) and/or Vulnerability Management.
• Exposure in security environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Experience with zero-day vulnerability identification, assessment, response, and remediation.
• Experience working with remediation SLAs and vulnerability tracking.
• Familiarity with security exceptions, risk acceptance, compensating controls, and risk treatment processes.
• Experience coordinating remediation across infrastructure, cloud, network, application, and DevOps teams.

Relevant security certifications such as:

• CompTIA Security+
• CompTIA CySA+
• GIAC Security Essentials (GSEC)