Vulnerability Management Engineer in भारत

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vulnerability Management Engineer I based in India. We are looking for a detail-oriented cybersecurity professional to support enterprise vulnerability management operations and strengthen the organization’s security posture. In this role, you will monitor vulnerability scans, investigate scanning issues, validate remediation activities, and help ensure that security findings are addressed within established timelines. You will work with vulnerability management platforms, security dashboards, ticketing systems, and asset data to track risks and maintain accurate documentation. Collaborating with asset owners and internal technical teams, you will support vulnerability advisories, exception reviews, and external attack surface management activities. The position offers an opportunity to build hands-on experience with enterprise security tools, risk assessment processes, and remediation workflows. As your expertise develops, you may also contribute to security engineering initiatives, automation, and continuous process improvement in a remote working environment. Accountabilities - Validate vulnerability scan schedules and confirm that scans run as planned across assigned networks, subnets, and geographic regions. - Monitor scanner health, assignments, configurations, and scan failures, investigating issues involving offline scanners, authentication, access permissions, and network connectivity. - Create, update, and follow up on incident and remediation tickets related to scanner failures, scanning issues, and vulnerability resolution. - Support approved ad hoc rescans for eligible assets, verify hostnames and IP addresses, review vulnerability details, and confirm whether remediation has successfully resolved reported findings.

- Maintain accurate remediation records by attaching scan results, CSV reports, supporting evidence, and clear validation notes to relevant tickets. - Monitor vulnerability dashboards and generate reports using tools such as ArmorCode and CrowdStrike to track findings, remediation statistics, service-level agreements (SLAs), and evidence requirements. - Review vulnerability exception requests by validating affected assets, business justifications, supporting evidence, asset and risk owners, exception categories, and approval status. - Assist with creating and maintaining approved vulnerability exceptions in designated platforms after all required approvals have been obtained. - Support vulnerability advisories by validating Common Vulnerabilities and Exposures (CVE) information, affected assets, impacted software versions, and remediation follow-up with asset owners. - Review requests to reassign vulnerability findings, validate ownership evidence, prepare documentation templates, and coordinate reviews with internal stakeholders. - Assist with External Attack Surface Management (EASM) activities by identifying asset ownership, mapping responsible teams, and coordinating remediation efforts. - Prioritize immediate follow-up on critical vulnerabilities that could affect external security ratings, risk indicators, or the organization’s security posture. - Gradually support additional security engineering activities under guidance, including security configuration assessments, asset onboarding validation, approved security template reviews, and troubleshooting of security tooling. - Contribute to process improvement and automation initiatives while following established security procedures and escalation guidelines. Requirements - Basic understanding of cybersecurity fundamentals, including vulnerabilities, risk ratings, CVEs, remediation processes, and security patching. - Foundational knowledge of networking concepts, including IP addresses, subnets, ports, protocols, and network connectivity.