Senior Information Technology Executive

Yusen Logistics; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Yusen Logistics is seeking a Security Operations professional to manage patch deployments, vulnerability remediation, and incident response across IT environments in Mumbai. You will coordinate with infrastructure, application teams and business units to maintain secure and compliant operations.

The role emphasizes monitoring, triage, containment, and recovery activities, along with reporting to management and ensuring SLAs are met.

Responsibilities

• Plan, coordinate, and monitor monthly and emergency patch deployments across endpoints, and network devices.
• Validate patch applicability and assess potential business impact before deployment.
• Track patch compliance and ensure adherence to organizational security policies and SLAs.
• Coordinate with Infrastructure, Application, and Business teams for patch implementation.
• Maintain patch deployment schedules, reports, and dashboards.
• Follow up with application owners and infrastructure teams on overdue patches and remediation activities.
• Perform post-patching validation and ensure successful deployment.
• Act on vulnerability assessments reports from tools Rapid7 shared by corporate security team.
• Analyse vulnerability scan results and prioritize remediation based on risk, CVSS score, and business criticality.
• Collaborate with system owners and technology teams to remediate identified vulnerabilities.
• Track remediation progress and verify vulnerability closure.
• Generate periodic vulnerability management reports and risk dashboards for management.
• Support compliance and audit requirements related to vulnerability management.
• Monitor and respond to security incidents, alerts, and events.
• Perform triage, investigation, containment, eradication, and recovery activities.
• Coordinate with SOC, Infrastructure, and Application teams during security incidents.
• Document incident findings, root cause analysis (RCA), and lessons learned.
• Escalate critical incidents as per defined incident response procedures.
• Ensure security incidents are closed on or before defined SLA.
• Support SIEM monitoring and security tools management.
• Participate in incident response drills and tabletop exercises.

Tools

Rapid7

Job description

Role & responsibilities

1. Patch Management & Follow-ups

• Plan, coordinate, and monitor monthly and emergency patch deployments across endpoints, and network devices.
• Validate patch applicability and assess potential business impact before deployment.
• Track patch compliance and ensure adherence to organizational security policies and SLAs.
• Coordinate with Infrastructure, Application, and Business teams for patch implementation.
• Maintain patch deployment schedules, reports, and dashboards.
• Follow up with application owners and infrastructure teams on overdue patches and remediation activities.
• Perform post-patching validation and ensure successful deployment.

2. Vulnerability Management

• Act on vulnerability assessments reports from tools Rapid7 shared by corporate security team.
• Analyse vulnerability scan results and prioritize remediation based on risk, CVSS score, and business criticality.
• Collaborate with system owners and technology teams to remediate identified vulnerabilities.
• Track remediation progress and verify vulnerability closure.
• Generate periodic vulnerability management reports and risk dashboards for management.
• Support compliance and audit requirements related to vulnerability management.

3. Security Incident Management

• Monitor and respond to security incidents, alerts, and events.
• Perform triage, investigation, containment, eradication, and recovery activities.
• Coordinate with SOC, Infrastructure, and Application teams during security incidents.
• Document incident findings, root cause analysis (RCA), and lessons learned.
• Escalate critical incidents as per defined incident response procedures.
• Ensure security incidents are closed on or before defined SLA.
• Support SIEM monitoring and security tools management.
• Participate in incident response drills and tabletop exercises.