Sr. Security Specialist (Vulnerability Management)

UST; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

UST in India seeks a Cyber Security Specialist – Sr. Security Specialist (L4) with 15+ years of relevant experience. The role focuses on vulnerability management, cloud security posture, XDR/endpoint security, and zero trust across multi-country IT environments.

The candidate will drive remediation, engage with CIOs and vendors, and lead threat intelligence efforts while coordinating with OT teams and security operations for robust infrastructure protection.

Qualifications

• Vulnerability management with Nessus/Qualys and risk-based prioritization
• Hands-on cloud security in AWS and Azure, CSPM tooling
• Endpoint protection and XDR coverage across platforms
• Server/network hardening and CIS benchmarks across Linux/Windows
• Threat intel, investigation, and MITRE ATT&CK familiarity
• Experience automating remediation with SOAR and playbooks
• Implementing Zero Trust concepts like identity-centric controls
• Strong stakeholder communication across international teams

Responsibilities

• Conduct hands-on vulnerability assessments, analyze CVSS, prioritize remediation across global assets.
• Manage endpoint security and cloud posture across AWS/Azure and CSPM tools.
• Own infrastructure security for servers and network devices, patching, hardening, CIS checks.
• Lead remediation discussions with OT teams, CIOs, and vendors for critical assets.
• Lead threat investigations and intelligence work using MITRE ATT&CK framework.
• Support SOAR-driven automated responses to reduce manual triage time.
• Contribute to Zero Trust initiatives and reduce implicit trust in the estate.
• Monitor AI/GenAI security risks and educate teams on threats and mitigations.

Skills

Vulnerability management

Cloud security

Endpoint & XDR

Infrastructure hardening

Threat intelligence

SOAR / automation

Zero Trust

Communication

Job description

Role Description

Job Title: Cyber Security Specialist – Sr. Security Specialist (L4)

Location: India

Shift: EMEA

Experience: 15+ years relevant experience

Priority Skills: Vulnerability management (Nessus/CVSS), cloud security posture (AWS/Azure), XDR/endpoint security, SOAR-driven remediation, Zero Trust fundamentals, and current threat-intel practices.

Key Responsibilities

• Conduct hands-on vulnerability assessments (Nessus, Qualys, or equivalent), analyze CVSS scores, and prioritize remediation based on risk exposure across 40 countries.
• Manage endpoint security (AV, XDR) and cloud security posture across AWS, Azure, and infra SDN components, including CSPM tooling (e.g., Wiz, Prisma Cloud, Defender for Cloud).
• Own infrastructure security for Windows/Linux servers and network devices — patch management, server/network hardening, and CIS compliance checks.
• Drive remediation and solution advisory: liaise with operational technology teams, country D&T heads, CIOs, and vendors to close out infrastructure findings on critical assets.
• Lead threat investigations and intelligence work — identify threats from s/advisories, apply frameworks like MITRE ATT&CK, and coordinate response with vendors where operational technology is affected.
• Support SOAR-based automated response and playbook-driven remediation to reduce manual triage time.
• Contribute to Zero Trust initiatives — identity-centric access controls, micro-segmentation, and reduced implicit trust across the estate.
• Stay current on AI/GenAI-related security risk (e.g., securing AI-enabled tooling, awareness of prompt-injection and data-leakage risks in copilots/agents used internally).
• Drive security awareness — communicate recommendations to end users after breaches or PUP/malware-related threats, and help improve organization-wide threat exposure scores across 40 countries.

Required Skills

• Vulnerability Management — Nessus (or equivalent), CVSS scoring, risk-based prioritization.
• Cloud Security — Hands-on with AWS and Azure; familiarity with CSPM/CNAPP tooling.
• Endpoint & XDR — CrowdStrike, SentinelOne, Microsoft Defender, or equivalent.
• Infrastructure Hardening — Windows/Linux server security, patch management, CIS benchmarks.
• Threat Intelligence & Investigation — triage, threat hunting, MITRE ATT&CK familiarity.
• SOAR / Automation — Experience with automated remediation playbooks and SOC tooling integration.
• Zero Trust — Understanding of identity-centric security and micro-segmentation principles.
• Communication — Strong stakeholder management across global, multi-country teams (D&T heads, CIOs, vendors).

Preferred Qualifications

• Certifications: CISSP, CISM, or equivalent; cloud security certs (AWS Security Specialty / Azure Security Engineer) a plus.
• Prior experience securing hybrid/multi-cloud, multi-country enterprise environments (40+ countries a strong plus).
• Exposure to AI-enabled security tooling or securing GenAI/agentic workflows.

Role Description

Job Title: Cyber Security Specialist – Sr. Security Specialist (L4)

Location: India

Shift: EMEA

Experience: 15+ years relevant experience

Priority Skills: Vulnerability management (Nessus/CVSS), cloud security posture (AWS/Azure), XDR/endpoint security, SOAR-driven remediation, Zero Trust fundamentals, and current threat-intel practices.

Key Responsibilities

• Conduct hands-on vulnerability assessments (Nessus, Qualys, or equivalent), analyze CVSS scores, and prioritize remediation based on risk exposure across 40 countries.
• Manage endpoint security (AV, XDR) and cloud security posture across AWS, Azure, and infra SDN components, including CSPM tooling (e.g., Wiz, Prisma Cloud, Defender for Cloud).
• Own infrastructure security for Windows/Linux servers and network devices — patch management, server/network hardening, and CIS compliance checks.
• Drive remediation and solution advisory: liaise with operational technology teams, country D&T heads, CIOs, and vendors to close out infrastructure findings on critical assets.
• Lead threat investigations and intelligence work — identify threats from s/advisories, apply frameworks like MITRE ATT&CK, and coordinate response with vendors where operational technology is affected.
• Support SOAR-based automated response and playbook-driven remediation to reduce manual triage time.
• Contribute to Zero Trust initiatives — identity-centric access controls, micro-segmentation, and reduced implicit trust across the estate.
• Stay current on AI/GenAI-related security risk (e.g., securing AI-enabled tooling, awareness of prompt-injection and data-leakage risks in copilots/agents used internally).
• Drive security awareness — communicate recommendations to end users after breaches or PUP/malware-related threats, and help improve organization-wide threat exposure scores across 40 countries.

Required Skills

• Vulnerability Management — Nessus (or equivalent), CVSS scoring, risk-based prioritization.
• Cloud Security — Hands-on with AWS and Azure; familiarity with CSPM/CNAPP tooling.
• Endpoint & XDR — CrowdStrike, SentinelOne, Microsoft Defender, or equivalent.
• Infrastructure Hardening — Windows/Linux server security, patch management, CIS benchmarks.
• Threat Intelligence & Investigation — triage, threat hunting, MITRE ATT&CK familiarity.
• SOAR / Automation — Experience with automated remediation playbooks and SOC tooling integration.
• Zero Trust — Understanding of identity-centric security and micro-segmentation principles.
• Communication — Strong stakeholder management across global, multi-country teams (D&T heads, CIOs, vendors).

Preferred Qualifications

• Certifications: CISSP, CISM, or equivalent; cloud security certs (AWS Security Specialty / Azure Security Engineer) a plus.
• Prior experience securing hybrid/multi-cloud, multi-country enterprise environments (40+ countries a strong plus).
• Exposure to AI-enabled security tooling or securing GenAI/agentic workflows.

Skills

AWS Security, Azure Security, Network Security