Lead Engineer, Vulnerability Management

Zinnov Management Consulting; Bengaluru; Hybrid; INR 4,200,000 - 6,600,000; Full time

Job summary

Zinnov Management Consulting in Bengaluru seeks a Lead Engineer, Vulnerability Management, to own scanning, prioritization and remediation tracking across infrastructure and cloud environments. You will report on risk, drive timely patching and governance while collaborating with global teams.

The role emphasizes ownership, cross-functional collaboration, and continuous improvement of vulnerability tooling and processes to reduce organizational risk.

Qualifications

• 8+ years of experience in cybersecurity engineering, governance, or risk management.
• Hands-on with vulnerability management and patch management.
• Experience with Tenable, Qualys, Rapid7.
• Strong risk-based prioritization and remediation workflows.
• Experience coordinating patch management across Windows, Linux and cloud environments.
• Strong SQL/Python skills for automation, reporting and analysis.
• Excellent collaboration and stakeholder management.
• Experience in global or matrixed environments.
• Ownership.

Responsibilities

• Lead vulnerability scanning, validation and remediation tracking across enterprise environments.
• Prioritize vulnerabilities based on risk, exposure and business impact; drive timely patching and remediation.
• Improve vulnerability management workflows, reporting and governance.
• Support security risk reduction through continuous monitoring and issue closure.
• Define risk-based prioritization models to focus remediation on high-impact vulnerabilities.
• Drive patch management coordination with infrastructure and application teams.
• Track and report vulnerability metrics and SLA compliance to security leadership.
• Lead scanning strategy across cloud, on-prem, and endpoint environments.
• Cross-team remediation with Cloud Security and endpoint teams.
• Continuously improve vulnerability management tooling and process maturity.

Skills

Cybersecurity experience

Vulnerability management

Patch management

Vulnerability tools

Risk-based prioritization

SQL/Python

Stakeholder management

Global/matrix environments

Ownership

Tools

Tenable

Qualys

Rapid7

Job description

What you'll do

As a Lead Engineer, Vulnerability Management, you will lead the end-to-end vulnerability management process across infrastructure and cloud environments. You will own scanning, prioritization, remediation tracking and reporting to help reduce risk and improve the organizations security posture.

How you'll make an impact

• Lead vulnerability scanning, validation and remediation tracking across enterprise environments
• Prioritize vulnerabilities based on risk, exposure and business impact. Partner with infrastructure, application and cloud teams to drive timely patching and remediation.
• Improve vulnerability management workflows, reporting and governance.
• Support security risk reduction through continuous monitoring and issue closure.
• Define risk-based prioritization models to focus remediation on the highest-impact vulnerabilities
• Drive patch management coordination with infrastructure and application teams
• Track and report vulnerability metrics and SLA compliance to security leadership
• Lead scanning strategy across cloud, on-prem, and endpoint environments
• Partner with Cloud Security and endpoint teams on cross-functional remediation
• Continuously improve vulnerability management tooling and process maturity.

What you'll bring

Skills Required:

• 8+ Years of relevant experience in cybersecurity engineering, governance, or risk management
• Hands-on experience with Vulnerability management (Tenable/Qualys/Rapid7) and patch management
• Hands-on experience with Tenable, Qualys, Rapid7 or similar vulnerability scanning tools
• Strong understanding of vulnerability assessment, risk‑based prioritization and remediation workflows
• Experience coordinating patch management across Windows, Linux and cloud environments
• Strong SQL/Python skills are a plus for automation, reporting and analysis.
• Good stakeholder management and ability to drive closure across technical teams.
• Experience in global or matrixed environments
• Excellent collaboration and stakeholder management
• Strong problem‑solving and analytical
• Ownership