Security Operations Specialist

Hackajob; Dadri, Gurugram District, Delhi; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Hackajob is seeking a Vulnerability Management Lead to drive the vulnerability lifecycle across our infrastructure. You will define the framework, scale scanning and remediation processes, and coordinate with partners to prioritize and address threats.

The role requires deep knowledge of vulnerability and threat management, hands-on experience with Rapid7/Qualys/Nessus, and strong reporting skills to inform management and clients. A security-first mindset is essential.

Qualifications

• Vulnerability management experience required.
• Experience with vulnerability tools (Rapid7/Qualys/Nessus).
• Strong Windows and Linux knowledge.
• Strong networking knowledge.
• CEH/ECSA or equivalent security certs.
• Degree in IT/Engineering or similar.
• Knowledge of cyberattack techniques and risk management.
• Ability to prepare reports and dashboards.
• Familiar with Cisco/Juniper firewalls, IPS, SIEM, NAC.

Responsibilities

• Develop and implement the Vulnerability Management Framework.
• Enhance the scope and efficiency of vulnerability scanning and tool integration.
• Design and manage periodic penetration testing exercises.
• Collaborate with stakeholders to define remediation activity.
• Perform vulnerability scans using the management tool.
• Analyze threat data and vulnerabilities on clients' networks.
• Prepare and send vulnerability reports to stakeholders.
• Configure scan parameters and reporting; troubleshoot failures.
• Identify false positives and liaise with vendors to resolve.
• Drive remediation across multiple stakeholder groups.

Skills

Vulnerability management

Windows

Linux

Networking

Security concepts

Education

CEH

ECSA

Tools

Rapid7

Qualys

Nessus

Job description

Why we need this role

We are seeking a dynamic and motivated Vulnerability Management Lead to join our rapidly growing program. The ideal candidate will blend cybersecurity expertise with technical analytical skills to support diverse operational needs. The Vulnerability Management Lead will play a crucial role in tracking and managing the identification, assessment, and remediation of security vulnerabilities across the organizations infrastructure and monitoring and reporting on vulnerability and other security compliance status. The role requires collaboration with various partners to ensure that vulnerability assessments and emerging threats are prioritized and advanced. Additionally, the successful candidate will work with management to continuously evolve the vulnerability management program.

What you will do

• The development and implementation of the Vulnerability Management Framework.
• Enhancing the scope and efficiency of current vulnerability scanning and management tools and integration between them.
• Design and manage the periodic penetration testing exercise.
• Collaborating with identified stakeholders to provide specialist guidance and support, ensuring effective vulnerability identification, prioritisation and remediation activity definition.
• Perform Vulnerability scans using Vulnerability Management tool
• Responsible for working with leading team to assist with understanding threat data and vulnerabilities found on clients network
• Prepare and send error free Vulnerability Management reports to respective stakeholders
• Send scan notification and completion emails as per defined timelines.
• Configuration of vulnerability scans and reporting
• Troubleshooting in case of scan failures or tool-based issues
• Identify false positive and connect with vendor and support teams to resolve it
• Drive remediation connects with multiple stake holders / resolver groups

What we're looking for

• Self-driven individual with vulnerability management function experience.
• Proven experience with products dealing with vulnerability management services which include - Rapid7, Qualys, Nessus etc.
• Strong understanding on Windows systems, Linux systems
• Strong understanding on Networking
• Should have completed certifications like CEH, ECSA or other equivalent security certifications
• Degree in Information Technology, Engineering or similar
• In-depth knowledge of and experience in security concepts such as cyberattacks and techniques, risk management, incident management, threat management, etc.
• Depth insight on all latest vulnerabilities and highlight the risk to client environment
• Proficient in preparation of reports, dashboards and documentations.
• Knowledge /Experience of security technologies such as Cisco/Juniper Firewalls, Application Firewalls, IPS, SIEM, Proxy, NAC, etc.