SAT (Qualys VMDR exp)

NTT Data Singapore; Chennai District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

NTT Data Singapore is seeking an experienced Information Security professional to lead vulnerability assessments and policy compliance across on-premises, cloud, and containerized environments. The role requires strong communication, risk assessment skills, and the ability to guide remediation efforts with IT teams.

Candidates should have a minimum of 6 years in information security, familiarity with banking sector practices, and a solid background in security controls.

Qualifications

• Minimum 6 years of experience in Information security.
• Strong written and spoken communication skills.
• Ability to lead and coordinate with teams across IT operations.
• Willingness to learn new skills quickly and adapt to evolving threats.
• Industry knowledge in security controls, vulnerability management, and risk assessment.

Responsibilities

• Perform vulnerability assessment & policy compliance using scanning tools.
• Assess vulnerabilities on on-prem, cloud, containers, databases, web services and other infra.
• Validate false positives and deliver quality reports.
• Act as technical SME to analyze results and detection logic.
• Provide remediation guidance to infrastructure/application teams.
• Review findings, identify root causes and recommend improvements.
• Maintain vulnerability QA by building knowledge base.
• Report on vulnerabilities and latest advancments in lifecycle.
• Understand and communicate security policies to management and staff.
• Propose improvements to vulnerability management service based on trends.
• Act as line manager in absence of team lead.

Skills

Communication skills

Time management

Leadership

Willingness to learn

Analytical thinking

Education

Bachelor degree in Engineering/CS/IT

Job description

• Perform Vulnerability assessment & Policy Compliance using leading Vulnerability Scanning solutions like Qualys etc.
• Perform Vulnerability assessments & Policy Compliance on On-prem, Cloud hosted systems, container (like Docker & Kubernetes), databases, web services and other widely deployed infrastructure components.
• Perform false positive validation and ensure delivery of quality reports.
• Act as a technical SME to analyze the vulnerability results & detection logic.
• Provide technical advice and support on remediation to infrastructure / application support teams.
• Review findings and identify root causes for common issues and provide recommendations for sustainable improvements.
• Responsible to maintain vulnerability quality assurance by building VM team technical knowledge base.
• Research and report on security vulnerabilities and latest advancements in the vulnerability management lifecycle.
• Understand security policies, procedures and guidelines to all levels of management and staff.
• Communicate effectively orally and in writing and establish cooperative working relationships.
• Provide suggestion to improve vulnerability Management service based on current trends in information technology (Network, system security software and hardware).
• Act as line manager in the absence of team lead.
  

Requirement:

• Minimum 6 years of experience in Information security and preferably in Banking and Financial services sector
• In-depth working experience on Cloud technologies, routers, switches, firewalls, load balancers and proxy will be added advantage for the role.
• Bachelor Degree in Engineering, Computer Science/Information Technology or its equivalent.
• Industry certifications will be a plus e.g. CISSP, CCNA Security, CCIE, CCNP Security, CISA, CRISC and CISM.
• Strong knowledge and subject matter expertise in multiple areas within Information Security.
• Hands on skill and expertise in performing risk / threat assessments/risk consulting.
• Excellent written, oral communication and reporting skills.
• Provides technical leadership, expertise and direction working with district and college technical staff for design and implementation of information technology security systems.
• Develops strategy for propagating, maintaining, and measuring compliance against security policies, standards, and guidelines district-wide.
• Time management and organizational skills
• Ability and desire to learn new skills quickly
• Performs other related duties as assigned.