Z

Zensar

Global IT services for digital transformation

Vulnerability Management Lead - Scanning and Remediation

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timePune, Maharashtra, IndiaNo salary listedIn-person

About the Job

Requirements

  • At least 7 years of experience in Vulnerability Management, Risk Assessment, Security Operations, and Infrastructure Security; the posting describes the experience range as 7–12+ years.
  • Experience with vulnerability management platforms including Qualys VMDR, Tenable Nessus, Tenable Security Center, Rapid7 InsightVM, and Microsoft Defender Vulnerability Management.
  • Experience with Windows Server, Linux (RHEL, Ubuntu, and CentOS), Unix, Active Directory, VMware, Citrix, storage systems, and network devices.
  • Experience with EDR/XDR platforms, SIEM solutions, threat intelligence, endpoint security, and patch management solutions.
  • Experience with Microsoft Azure, AWS, and hybrid cloud environments.
  • Preferred certifications include CISSP, CISM, GIAC Vulnerability Assessment (GVA), GSEC, CEH, CompTIA Security+, Qualys Certified Specialist, Tenable Certified Operator, Microsoft SC-200, Microsoft AZ-500, and AWS Security Specialty.

Responsibilities

  • Lead the enterprise vulnerability management lifecycle and define vulnerability management strategy, policies, and standards.
  • Establish vulnerability service-level agreements (SLAs) and remediation governance, drive organizational risk-reduction initiatives, and develop a vulnerability management maturity roadmap.
  • Present the cybersecurity risk posture to leadership teams.
  • Manage enterprise vulnerability scanning platforms; conduct authenticated and unauthenticated scans and internal and external vulnerability assessments; assess servers, endpoints, network devices, databases, cloud workloads, and applications; and validate critical and high-risk vulnerabilities.
  • Perform vulnerability triage and risk assessment; prioritize remediation using CVSS score, exploit availability, business impact, threat intelligence, asset criticality, and regulatory impact; identify vulnerabilities actively exploited in the wild; and maintain the enterprise risk register.
  • Coordinate remediation activities across technology teams, track vulnerability closure and SLA compliance, conduct remediation reviews and validation testing, manage exceptions and risk acceptance, and escalate overdue critical vulnerabilities to leadership.
  • Manage cloud vulnerability work using AWS Inspector, Security Hub, GuardDuty, Config, and IAM security assessment tools; Azure Defender for Cloud, Azure Security Center, Microsoft Defender Suite, Azure Policy, and Entra ID security; and AKS, EKS, Docker, Kubernetes security, and container image scanning.
  • Correlate vulnerabilities with active threat intelligence, identify exploited vulnerabilities and attack paths, support threat-informed vulnerability prioritization, perform attack surface assessments, and support cyber threat hunting initiatives.
  • Develop executive vulnerability dashboards; track vulnerability KPIs and KRIs; report remediation trends and compliance posture; and produce weekly, monthly, and quarterly executive reports.
  • Automate vulnerability management processes; integrate scanners with ServiceNow, Jira, SIEM, CMDB, and threat intelligence platforms; build automated remediation workflows; and develop scripts using PowerShell and Python.
  • Support ISO 27001, NIST, PCI-DSS, SOC 2, HIPAA, and GDPR; lead vulnerability remediation evidence collection; support internal and external audits; and conduct security control assessments.
  • Reduce critical vulnerabilities within SLA targets, improve enterprise vulnerability compliance above 95%, establish risk-based vulnerability prioritization, automate scan-to-remediation workflows, provide executive-level cyber risk visibility, and lead enterprise exposure management and vulnerability governance programs.

Desired Qualifications

  • Preferred expertise includes Qualys VMDR, Tenable, Rapid7, Microsoft Defender Vulnerability Management, vulnerability scanning and validation, remediation governance, Windows, Linux, VMware and cloud security, AWS Inspector, Azure Defender for Cloud, ServiceNow and CMDB integration, threat intelligence-based prioritization, executive dashboarding and KPI reporting, and security compliance and audit support.
  • Experience with Tenable.io, OpenVAS, Nexpose, CVSS 3.x/4.0, MITRE ATT&CK, MITRE CVE, CIS Benchmarks, the NIST Cybersecurity Framework, OWASP, AWS and Azure security tools, Recorded Future, Mandiant Threat Intelligence, REST APIs, Terraform, and Ansible.

About the Company

Zensar

Global IT services for digital transformation

Digital solutions and IT services company that partners with global organizations to drive digital transformation. Its offerings include intelligent automation, analytics, hyperconverged infrastructure, and digital application development and maintenance, delivered through long-term contracts, project-based engagements, and managed services. Indigo Slate handles virtual event creation. Zensar’s Living AI integrates artificial intelligence into business processes to boost outcomes. Unlike many competitors, it emphasizes reducing capital expenditure (Capex) and operating expenditure (Opex), simplifying vendor management, and improving efficiency through automation. The overall goal is to help clients adapt to the digital landscape, optimize technology infrastructure, and achieve higher operational efficiency.

Company size
10,001+
Company stage
IPO
Headquarters
Pune, India
Founded
1991

Recently Posted Jobs

Explore more opportunities at Zensar

See more jobs