Senior Security & Vulnerability Management

Must-Have

(Ideally should be between 4-6 Yrs)

• Daily assessment of vulnerabilities identified by infrastructure Scan
• Prioritizing vulnerabilities discovered along with remediation timeline(s)
• Work with Security team to have hindering documents reviewed and applied on all systems.
• Comply with MBSS client standards and SLAs.
• Conduct DR Drills for identified systems and maintain runbooks and drill documents updated.
• Align with BCP/BCM team on DR activities and all deliverables.
• Provides analysis of vulnerabilities to other team members to assist with overall vulnerability remediation efforts
• Perform analysis of security issues and/or vulnerabilities
• Maintain knowledge of security trends and threats
• Develop metrics and capabilities to ensure effective vulnerability management
• Executing the vulnerability lifecycle management strategy across the organization
• Configuring, scheduling and executing vulnerability scans, and delivering scan reports
• Establishing relationships with system owners and business process partners for the purposes of ensuring that identified vulnerabilities are remediated in accordance to established timelines
• Working with cross functional teams and internal users to enforce technical security standards by providing assistance in applying established standards to projects
• Provides analysis of vulnerabilities to other team members to assist with overall vulnerability remediation efforts
• Support the identification and impact classification for new vulnerabilities identified in the environment
• Brief VM leadership on vulnerability assessment results and potential risks
• Drive KPI/SLAs for the account related to Security metrics.
• Segregate Compliance and Vulnerability report and follow up end to end driving closure and SLA attainment.
• Knowledge on Business Impact Assessment and regular updates to BCM and BCP team.
• Additional knowledge on Archer, Qualys scan tool will be an advantage.

Good-to-Have

Should have hands on experience on Vulnerability scanning tools like Qualys & Archer.

Working knowledge of multiple IT platforms (i.e. Windows, Linux/Unix, Database, Network etc.).