Vulnerability Management Engineer.

Accountabilities

• Validate vulnerability scan schedules and confirm that scans run as planned across assigned networks, subnets, and geographic regions.

• Monitor scanner health, assignments, configurations, and scan failures, investigating issues involving offline scanners, authentication, access permissions, and network connectivity.

• Create, update, and follow up on incident and remediation tickets related to scanner failures, scanning issues, and vulnerability resolution.

• Support approved ad hoc rescans for eligible assets, verify hostnames and IP addresses, review vulnerability details, and confirm whether remediation has successfully resolved reported findings.

• Maintain accurate remediation records by attaching scan results, CSV reports, supporting evidence, and clear validation notes to relevant tickets.

• Monitor vulnerability dashboards and generate reports using tools such as ArmorCode and CrowdStrike to track findings, remediation statistics, service-level agreements (SLAs), and evidence requirements.

• Review vulnerability exception requests by validating affected assets, business justifications, supporting evidence, asset and risk owners, exception categories, and approval status.

• Assist with creating and maintaining approved vulnerability exceptions in designated platforms after all required approvals have been obtained.

• Support vulnerability advisories by validating Common Vulnerabilities and Exposures (CVE) information, affected assets, impacted software versions, and remediation follow-up with asset owners.

• Review requests to reassign vulnerability findings, validate ownership evidence, prepare documentation templates, and coordinate reviews with internal stakeholders.

• Assist with External Attack Surface Management (EASM) activities by identifying asset ownership, mapping responsible teams, and coordinating remediation efforts.

• Prioritize immediate follow-up on critical vulnerabilities that could affect external security ratings, risk indicators, or the organization’s security posture.

• Gradually support additional security engineering activities under guidance, including security configuration assessments, asset onboarding validation, approved security template reviews, and troubleshooting of security tooling.

• Contribute to process improvement and automation initiatives while following established security procedures and escalation guidelines.

Requirements

• Basic understanding of cybersecurity fundamentals, including vulnerabilities, risk ratings, CVEs, remediation processes, and security patching.

• Foundational knowledge of networking concepts, including IP addresses, subnets, ports, protocols, and network connectivity.

• Basic familiarity with Windows and Linux operating systems, network devices, databases, and cloud or virtualized environments.

• Ability to work with security dashboards, reports, CSV exports, ticketing systems, and documented operational procedures.

• Strong attention to detail when validating asset information, vulnerability findings, scan results, remediation evidence, and exception requests.

• Good written communication skills, with the ability to document findings clearly, update tickets accurately, and follow up effectively with stakeholders.

• Willingness to learn enterprise vulnerability management platforms, IT service management tools, configuration management database (CMDB) processes, and security operations workflows.

• A proactive and accountable approach to assigned tasks, with the ability to follow issues through to resolution and escalate blockers when necessary.

• Ability to collaborate effectively with internal teams, asset owners, and requestors while maintaining professional communication and accurate records.

• Strong organizational skills, disciplined time management, and the ability to work independently in a remote environment while providing regular progress updates.

• Curiosity, adaptability, and motivation to develop broader cybersecurity and security engineering capabilities.

• Preferred qualification: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related field.

• Preferred certifications or training: CompTIA Security+, CompTIA Network+, Certified in Cybersecurity (CC), or equivalent foundational cybersecurity learning. Certifications are beneficial but not mandatory.

Benefits

• Employment type: Full-time position.

• Location: Bangalore, India, with a remote work arrangement.

• Professional development: Opportunity to gain practical experience in vulnerability management, remediation validation, security monitoring, and enterprise cybersecurity workflows.

• Technical exposure: Hands-on experience with security platforms and tools, including ArmorCode, CrowdStrike, vulnerability scanners, dashboards, and ticketing systems.

• Career progression: Potential to expand into security engineering responsibilities as technical expertise and operational maturity develop.

• Continuous learning: Opportunity to build knowledge of cybersecurity standards, vulnerability assessment, asset management, and security automation.

• Collaborative environment: Work with technical teams and asset owners to address security risks and improve operational processes.

• Flexibility: Remote working environment requiring effective time management, regular communication, and collaboration with internal stakeholders.

• Salary and additional benefits: Compensation, healthcare coverage, paid leave, bonuses, and other employment benefits were not specified in the available job description.