Vulnerability Analyst
Ernst Young · Bengaluru · onsite · Posted 43d ago
Undisclosed2–2 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Supervising Associate Container Security SME Job Summary
The Container Security Subject Matter Expert (SME) supports Vulnerability Management across EY by helping manage the full vulnerability lifecycle for containerized environments.
This role requires strong practical knowledge of container and Kubernetes security, including hands-on expertise with Aqua Security (AquaSec), as well as experience with Wiz and Kubernetes-as-a-Service (KaaS) environments.
The candidate will act as a key technical resource for Container Vulnerability Management, partnering Operations, Engineering, KaaS DevOps, application teams, and other stakeholders to identify, analyze, triage, communicate, track, and support remediation of security vulnerabilities affecting containerized environments.
The role combines technical expertise, vulnerability management, stakeholder coordination, metrics and reporting, risk-based prioritization, and continuous service improvement.
Key Responsibilities - Manage end-to-end vulnerability management activities across the lifecycle for containerized environments, including containers, container images, registries, Kubernetes clusters, and related cloud-native infrastructure.
- Track and report remediation progress, vulnerability aging, SLA adherence, exceptions, and risk acceptance items.
- Use container security tools such as AquaSec and Wiz to assess, monitor, and support remediation of container-related vulnerabilities.
- Serve as the Container Security SME by providing technical guidance and advisory support for vulnerability remediation in containerized environments.
- Identify automation opportunities that improve the efficiency, consistency, and effectiveness of container security operations.
- Analyze vulnerability data to develop metrics that provide actionable vulnerability intelligence and exposure visibility across container environments.
- Engage closely with application, DevSecOps, cloud, and platform engineering teams to drive remediation of vulnerabilities in container images and runtime environments.
- Correlate vulnerability data with asset ownership, image lineage, deployment context, internet exposure, and business criticality to support risk-based prioritization.
- Support executive and operational reporting on container security posture, remediation trends, high-risk vulnerabilities, and open risk items.
- Contribute to process documentation, playbooks, metrics, dashboards, and continuous improvement initiatives for container vulnerability management.
- Experience with Grafana and KQL (Kusto Query Language) is highly desirable.
Sourced from naukri
Skills
AutomationDevopsGrafanaKubernetesprocess documentationPlatform engineeringcontainer securityKusto Query LanguageDevsecopsservice improvementCapital MarketsContainerSLAdeploymentKubernetes securitycloudoperations
About Ernst & Young
Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on