Security Specialist

VOLKSWAGEN GROUP DIGITAL SOLUTIONS PRIVATE LIMITED; Pune District, Gurugram District, Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

VOLKSWAGEN GROUP DIGITAL SOLUTIONS PRIVATE LIMITED is seeking a Vulnerability Management Engineer Level 2 to oversee day-to-day vulnerability operations. You will operate Tenable Security Center, Tenable One, and Nessus scanners, manage asset onboarding, and ensure scan accuracy while driving remediation with owners.

You will prioritize findings using CVSS and asset criticality, prepare reports and dashboards for European stakeholders, and support audits and compliance efforts.

Qualifications

• Hands-on experience in Vulnerability Management and IT Security.
• Strong understanding of CVE, CVSS, vulnerability types, and exploit mechanics.
• Strong practical knowledge of Tenable SC, Tenable One, and Nessus.
• Solid understanding of Windows and Linux server environments.
• Good knowledge of networking (ports, protocols, firewalls, routing).
• Understanding of patching processes and change management.
• Familiarity with compliance scanning (CIS benchmarks, hardening standards).
• Ability to understand common penetration testing techniques and methodologies (e.g., OWASP, MITRE ATT&CK).

Responsibilities

• Operate and maintain vulnerability management platforms (Tenable SC, Tenable One, Nessus).
• Schedule and execute authenticated and unauthenticated scans; onboard new assets.
• Ensure scan accuracy; track remediation with system owners and enforce SLAs.
• Coordinate rollout of Nessus Agent versions; keep engines/policies up to date.
• Monitor connectivity, performance, health of scanners; ensure coverage.
• Onboard new systems; deploy agents and scanners; configure active scanning.
• Maintain scan templates and scanning policies; assign assets to groups/policies.
• Run regular vulnerability and compliance scans; monitor results and errors.
• Troubleshoot scanning issues (credentials, firewall blocks, ports).
• Prioritize findings using CVSS, exploitability, asset criticality; provide remediation guidance.

Skills

Vulnerability management

IT security

CVSS

CVE

Tenable SC

Tenable One

Nessus

Windows server

Linux

Networking

Patching

Compliance scanning

OWASP

MITRE ATT&CK

Tools

Tenable SC

Tenable One

Nessus

Job description

Job Title

Vulnerability Management Engineer Level 2

Role Objective

The Vulnerability Management Engineer Level 2 is responsible for the day-to-day operational execution of the organizations vulnerability management activities. The role operates and maintains vulnerability management platforms (e.g., Tenable Security Center, Tenable One or comparable solutions), schedules and executes authenticated and unauthenticated scans, ensures onboarding of new assets into the scanning scope, and validates scan accuracy. The engineer actively tracks remediation activities with system owners, enforces defined remediation SLAs, and ensures that vulnerabilities are properly documented, re-tested, and closed. The position ensures continuous visibility of technical exposure and supports measurable risk reduction through meaningful reporting and disciplined operational follow-up.

Key Responsibilities

• Tenable Infrastructure Operation: Operate and maintain Tenable Security Center (Tenable SC), Tenable One, and Nessus scanners
• Test and approve new Nessus Agent versions and Coordinate the rollout of them
• Keep scan engines, plugins, policies, and agents up to date
• Monitor connectivity, performance, and health
• Ensure proper scanner coverage and health monitoring
• Onboarding of New Systems: Deploy and troubleshoot Tenable Agents / Nessus Scanners / Nessus Managers
• Configure servers/VMs for active scanning
• Maintain scan templates and scanning policies
• Assign systems to correct Asset Groups and Scan Policies
• Execution and Monitoring of Vulnerability Compliance Scans: Schedule and perform regular vulnerability and compliance scans
• Monitor scan completion, accuracy, asset coverage, and scan errors
• Troubleshoot scanning issues (credentials, firewall blocks, service problems, missing ports, etc.)
• Analysis Prioritization of Findings: Review, validate, and prioritize vulnerabilities
• Use CVSS, exploitability, and asset criticality for risk-based classification
• Provide clear, concise recommendations to European stakeholders
• Remediation Tracking Escalation: Proactively follow up with server owners and application teams
• Track remediation progress and ensure timelines are met
• Highlight overdue critical findings and elevate when needed
• Support troubleshooting during patching or mitigation efforts
• Communication Reporting: Communicate professionally in English with European teams
• Prepare vulnerability reports, dashboards, KPIs, and SLA overviews
• Maintain documentation, runbooks, and operational procedures
• Support internal audits and compliance requirements
• Penetration Test Report Review Integration: Review and interpret penetration test reports delivered by internal or external security teams
• Validate the findings, assess their severity, and ensure they align with the organizations risk model
• Translate penetration test findings into actionable remediation tasks for system owners
• Follow up with responsible teams to ensure the identified weaknesses are addressed
• Integrate penetration test results into the vulnerability management workflow and tracking tools
• Provide summaries and clear explanations to stakeholders who may not have a security background

Required Knowledge

• Hands-on experience in Vulnerability Management and IT Security
• Strong understanding of CVE, CVSS, vulnerability types, and exploit mechanics
• Strong practical knowledge of Tenable SC, Tenable One, and Nessus
• Solid understanding of Windows and Linux server environments
• Good knowledge of networking (ports, protocols, firewalls, routing)
• Understanding of patching processes and change management
• Familiarity with compliance scanning (CIS benchmarks, hardening standards)
• Ability to understand common penetration testing techniques and methodologies (e.g., OWASP, MITRE ATT&CK)