Role: Threat & Vulnerability Management Specialist

Required Technical Skill Set:

Strong hands-on experience with Qualys Vulnerability Scanning & Remediation. Analyze scan results, assess risk, and prioritize vulnerabilities based on severity, exploit potential, and business impact.
Expertise in vulnerability assessment, risk scoring (CVSS), and remediation planning.
Monitor current threat landscapes, attacker tactics, and new vulnerabilities to inform proactive defense Develop and refine TVM processes, playbooks, and automation to improve efficiency
Familiarity with endpoint and email security tools (McAfee, ProofPoint, MimeCast) for integrated threat analysis.
Knowledge of patch management processes and compliance frameworks (ISO 27001, NIST, CIS). Experience with SIEM tools for correlating vulnerability data with threat intelligence.
Proficiency in automation scripting for vulnerability reporting and remediation workflows.

3 Desired Experience Range 10 Plus years

4 Location of Requirement Offshore (Kolkata/Hyd/Bangalore)

Desired Competencies (Technical/Behavioral Competency)

Must-Have

Experience in vulnerability management and threat analysis.

Hands-on experience with Qualys or equivalent vulnerability management tools. Strong analytical skills for risk assessment and remediation planning. Certifications like SC-200, CEH, or CompTIA Security+ are a plus.

Good-to-Have

Familiarity with penetration testing methodologies.
Knowledge of Zero Trust principles and integration with vulnerability management.
Experience with cloud-native vulnerability scanning for Azure/AWS/GCP.

SN Responsibility of / Expectations from the Role

1 Perform vulnerability scanning and assessment using Qualys across endpoints, servers, and EPOS systems.

2 Analyze and prioritize vulnerabilities based on risk scoring frameworks and coordinate remediation with infrastructure teams.

3 Integrate vulnerability data with SIEM platforms for threat correlation and incident response.

4 Develop and maintain vulnerability management processes, including reporting, automation scripts, and compliance tracking.

Threat & Vulnerability Management Specialist