Infrastructure Security Engineer (Vulnerability management); Work location: Onsite Bengaluru, Karnataka, India; Salary US$15 - 30 K/Year; Longterm (Duration): Job Closed
Job application has been closed
Job
Title: Infrastructure Security Engineer (Vulnerability management)
- Work location: Onsite Bengaluru, Karnataka, India
- Annual Salary US$15 - 30 K/Year; Longterm (Duration)
Key Responsibilities:
- Vulnerability
Assessment: Perform regular scans using BigFix and Qualys to identify
security risks in servers and applications.
- Impact
Analysis: Assess the potential risks and provide detailed analysis
for critical non-OS vulnerabilities.
- Remediation
Support: Collaborate with support teams to resolve identified
vulnerabilities and guide remediation efforts.
- Documentation: Keep
accurate records of vulnerability assessments, remediation actions, and
impact analyses.
- Monitoring: Track
security alerts and emergency vulnerabilities to ensure timely responses.
- Reporting: Prepare
reports on vulnerability status, trends, and remediation effectiveness.
- Continuous
Improvement: Stay up to date on emerging threats and recommend
improvements to processes and tools.
Qualifications:
- Education:
Bachelor’s degree in Cybersecurity, Information Technology, or a related
field.
- Experience:
Over 10 years of experience in a security analyst role, focusing
on vulnerability management.
Technical Skills:
- Proficient
in BigFix for patch management and vulnerability
remediation.
- Experienced
with Qualys for vulnerability scanning and assessment.
- Strong
knowledge of Windows and Linux operating systems and application
security.
- Familiarity
with security frameworks and compliance standards (e.g., NIST, ISO).
Desired Skills:
- Strong
analytical skills to effectively assess risks.
- Excellent
communication skills to convey technical concepts to both technical and
non-technical stakeholders.
- A
problem-solving mindset with a proactive approach to identifying vulnerabilities.
Preferred Certifications:
- CompTIA
Security+
- Certified
Ethical Hacker (CEH)
- Certified Information Systems Security Professional (CISSP)