GMS-Senior-VM - Qualys

Ernst & Young Advisory Services Sdn Bhd; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

EY Bengaluru seeks a Senior – Vulnerability Management professional to contribute technically to client engagements within GDS Cybersecurity. You will identify vulnerabilities, validate findings, and guide remediation efforts across cloud and on-prem environments.

You will mentor junior staff and help expand business opportunities within engagements, maintaining EY quality standards. Strong scripting (PowerShell/Python) and automation skills are valued.

Qualifications

• 6+ years of work experience in vulnerability assessment and remediation.
• Graduates in Computer Science, Information Systems, Engineering or related majors.

Responsibilities

• Understand vulnerability management and remediation processes across cloud, on-prem, and databases.
• Recommend remediation for vulnerable protocols and weak ciphers on Windows, Linux, and Unix.
• Validate vulnerabilities and create risk narratives for enterprise exposure.
• Patch Windows, Linux, and UNIX systems in mixed environments; produce reports.
• Create dashboards for performance monitoring and metrics.
• Lead and coach junior staff; support business development activities.

Skills

Vulnerability Mgmt

Qualys

Nessus

Ansible

PowerShell

Python

Cloud Security

Patch Management

Scripting

OS Troubleshooting

Education

BE / BTech / MSc / MTech / MBA

Tools

Qualys

Tenable

Ansible

Puppet

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

CMS-TEM Senior – VM - Qualys

As a Senior with EY’s Global Delivery Services (GDS) Cybersecurity Team, you will contribute technically to client engagements and internal initiatives. An important part of your role will be to actively establish, maintain and strengthen client’s relationships. You will also identify potential business opportunities for EY within existing engagements, report and elevate any engagement related issues to senior team members as appropriate.

The opportunity

In line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help senior members with business development activities.

Your key responsibilities

• Must have thorough understanding about the Vulnerability Management and Exception & Exemption process on cloud hosted systems, databases, web services and other widely deployed infrastructure components
• Must be able to provide recommendations for remediation of vulnerable protocols ( e.g. NTLMv1, SMBv1, Basic Authentication etc.) and Weak ciphers ( e.g. RC4, RC2 etc.) on Windows, Linux and Solaris platforms.
• Expert knowledge in validating and triaging vulnerabilities
• Patch Windows systems within on prem and cloud environments· Provide reports on vulnerabilities, exploits and patches
• Create risk narratives that explain threat exposure to the enterprise
• Able to identify and exploit security vulnerabilities in a wide array of systems in a variety of situations
• Extensive experience with vulnerability scanning technologies, e.g. Qualys, Nessus, Insight VM
• Conduct vulnerability scans, analyse reports, and validate potential findings
• Strong Automation Experience with the PowerShell/other scripting or programming/configuration management tools (Chef, Ansible, Puppet, Python, Ruby)
• Must have knowledge about automating solution for vulnerability (NTLMv1, SMBv1, weak ciphers etc.) remediation
• Experience implementing, administering and creating custom dashboards for performance monitoring/Metrics
• Excellent troubleshooting skills related to OS, Network and other performance issues
• Stays current with new and existing vulnerabilities and related news.
• Ability to work both independently as well as lead a team of experienced staff to manage the vulnerability management program.

Skills and attributes for success

• Hands on operational experience with vulnerability management tools (e.g. Qualys, Tenable, Ansible) including the ability to deploy, configure, and run these tools.
• Must have thorough understanding of Patch Management end-to-end lifecycle.
• Must have worked on either one of the solutions (SSCM, Manage Engine, Qualys PM module)
• Familiarized with the latest security vulnerabilities and exploit, understanding of web-based application vulnerabilities (OWASP Top 10), cloud security and architecture
• Strong understanding of network and server security including CIS, SSL/TLS, IPSEC, etc.
• Experience with scripting / programming skills (e.g., Python, PowerShell)
• Hands on experience of tools like network monitor, fiddler, performance monitor, process monitor
• Understanding of network security and popular attacks vectors.
• Fluency in English, other language skills are considered an asset

To qualify for the role, you must have

• Graduates / BE / BTech / MSc / MTech / MBA in the fields of Computer Science, Information Systems, Engineering, Business or related major with minimum 6 years of work experience especially in vulnerability assessment and remediation.
• Knowledge of Windows, Linux, UNIX, Solaris any other major operating systems.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.