Vulnerability Management Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vulnerability Management Engineer I based in India.

We are looking for a detail-oriented cybersecurity professional to support enterprise vulnerability management operations and strengthen the organization’s security posture. In this role, you will monitor vulnerability scans, investigate scanning issues, validate remediation activities, and help ensure that security findings are addressed within established timelines. You will work with vulnerability management platforms, security dashboards, ticketing systems, and asset data to track risks and maintain accurate documentation. Collaborating with asset owners and internal technical teams, you will support vulnerability advisories, exception reviews, and external attack surface management activities. The position offers an opportunity to build hands-on experience with enterprise security tools, risk assessment processes, and remediation workflows. As your expertise develops, you may also contribute to security engineering initiatives, automation, and continuous process improvement in a remote working environment.

• Validate vulnerability scan schedules and confirm that scans run as planned across assigned networks, subnets, and geographic regions.

• Monitor scanner health, assignments, configurations, and scan failures, investigating issues involving offline scanners, authentication, access permissions, and network connectivity.

• Create, update, and follow up on incident and remediation tickets related to scanner failures, scanning issues, and vulnerability resolution.

• Support approved ad hoc rescans for eligible assets, verify hostnames and IP addresses, review vulnerability details, and confirm whether remediation has successfully resolved reported findings.

• Maintain accurate remediation records by attaching scan results, CSV reports, supporting evidence, and clear validation notes to relevant tickets.

• Monitor vulnerability dashboards and generate reports using tools such as ArmorCode and CrowdStrike to track findings, remediation statistics, service-level agreements (SLAs), and evidence requirements.

• Review vulnerability exception requests by validating affected assets, business justifications, supporting evidence, asset and risk owners, exception categories, and approval status.

• Assist with creating and maintaining approved vulnerability exceptions in designated platforms after all required approvals have been obtained.

• Support vulnerability advisories by validating Common Vulnerabilities and Exposures (CVE) information, affected assets, impacted software versions, and remediation follow-up with asset owners.

• Review requests to reassign vulnerability findings, validate ownership evidence, prepare documentation templates, and coordinate reviews with internal stakeholders.

• Assist with External Attack Surface Management (EASM) activities by identifying asset ownership, mapping responsible teams, and coordinating remediation efforts.

• Prioritize immediate follow-up on critical vulnerabilities that could affect external security ratings, risk indicators, or the organization’s security posture.

• Gradually support additional security engineering activities under guidance, including security configuration assessments, asset onboarding validation, approved security template reviews, and troubleshooting of security tooling.

• Contribute to process improvement and automation initiatives while following established security procedures and escalation guidelines.

Requirements

• Basic understanding of cybersecurity fundamentals, including vulnerabilities, risk ratings, CVEs, remediation processes, and security patching.

• Foundational knowledge of networking concepts, including IP addresses, subnets, ports, protocols, and network connectivity.

• Basic familiarity with Windows and Linux operating systems, network devices, databases, and cloud or virtualized environments.

• Ability to work with security dashboards, reports, CSV exports, ticketing systems, and documented operational procedures.

• Strong attention to detail when validating asset information, vulnerability findings, scan results, remediation evidence, and exception requests.

• Good written communication skills, with the ability to document findings clearly, update tickets accurately, and follow up effectively with stakeholders.

• Willingness to learn enterprise vulnerability management platforms, IT service management tools, configuration management database (CMDB) processes, and security operations workflows.

• A proactive and accountable approach to assigned tasks, with the ability to follow issues through to resolution and escalate blockers when necessary.

• Ability to collaborate effectively with internal teams, asset owners, and requestors while maintaining professional communication and accurate records.

• Strong organizational skills, disciplined time management, and the ability to work independently in a remote environment while providing regular progress updates.

• Curiosity, adaptability, and motivation to develop broader cybersecurity and security engineering capabilities.

• Preferred qualification: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related field.

• Preferred certifications or training: CompTIA Security+, CompTIA Network+, Certified in Cybersecurity (CC), or equivalent foundational cybersecurity learning. Certifications are beneficial but not mandatory.

Benefits

• Employment type: Full-time position.

• Location: Bangalore, India, with a remote work arrangement.

• Professional development: Opportunity to gain practical experience in vulnerability management, remediation validation, security monitoring, and enterprise cybersecurity workflows.

• Technical exposure: Hands-on experience with security platforms and tools, including ArmorCode, CrowdStrike, vulnerability scanners, dashboards, and ticketing systems.

• Career progression: Potential to expand into security engineering responsibilities as technical expertise and operational maturity develop.

• Continuous learning: Opportunity to build knowledge of cybersecurity standards, vulnerability assessment, asset management, and security automation.

• Collaborative environment: Work with technical teams and asset owners to address security risks and improve operational processes.

• Flexibility: Remote working environment requiring effective time management, regular communication, and collaboration with internal stakeholders.

• Salary and additional benefits: Compensation, healthcare coverage, paid leave, bonuses, and other employment benefits were not specified in the available job description.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1