Senior Security Engineer

Gemini Consulting Services; Hyderabad; Híbrido; INR 1.800.000 - 2.400.000; Jornada completa

Descripción de la vacante

Gemini Consulting Services in Hyderabad seeks a Vulnerability Management & Security Operations Specialist (Senior) with 5+ years of experience to lead vulnerability assessments, prioritize risks beyond CVSS, and drive remediation across infrastructure, cloud, network, and applications. The role demands hands-on expertise in endpoint security, Windows/Linux, and security tooling.

The position is full-time in Hyderabad with 5 days on-site initially and a later hybrid arrangement.

Formación

• 5+ years of experience in Vulnerability Management, Security Operations, or related security domain.
• Hands-on experience in vulnerability assessment and vulnerability management.
• Strong understanding of risk-based vulnerability prioritization beyond CVSS/severity ratings.
• Ability to analyze, investigate, and validate vulnerability scan results.
• Knowledge of endpoint security and vulnerability remediation.
• Experience with Windows and Linux security from a defense perspective.

Responsabilidades

• Own end-to-end vulnerability management lifecycle from identification to closure.
• Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud, networks, and applications.
• Analyze vulnerability scans, identify false positives, and determine actual exposure.
• Prioritize risks based on asset criticality, business impact, exploitability, and exposure.
• Coordinate remediation activities across Windows, Linux, cloud, and network teams.
• Document findings, risk, impact, and recommended remediation actions.

Conocimientos

Vulnerability Management

Security Operations

Risk-based Prioritization

Endpoint Security

Windows Security

Linux Security

Networking Fundamentals

Cloud Security

Threat Analysis

Vulnerability Scanning

Herramientas

Wiz

CrowdStrike

Nexpose/Rapid7

Splunk

AppSpider

ServiceNow

Descripción del empleo

Hi Job Seeker,

We have an open position for Vulnerability and Security Engineer role (Senior) at Hyderabad location, for more details about organization and job details, refer to below link:

About Company: We, Gemini Consulting and Services is a leading Software Development based company, located at US, India and UAE.

https://www.gemini-us.com/

Work Information

• Work Location: Financial District, Hyderabad
• Mode of Work: 5 days from office until probation period of 6 months and later, it is Hybrid.
• Project Type: US Based.
• Employment Type: Full time role.
• Shift Hours: Rotational 2 to 10 PM IST(from office) and Night Shift (remote).

Job Title

Vulnerability Management & Security Operations Specialist

Experience: 5+ Years

Job Overview

We are looking for an experienced security professional with strong hands-on experience in vulnerability assessment and vulnerability management. The candidate should be capable of analyzing and validating security scan results, performing risk-based prioritization beyond basic severity ratings, defining remediation strategies, and driving vulnerability remediation across multiple technical teams. The role requires strong knowledge of endpoint security, cloud environments, Windows and Linux operating systems, networking, and basic application security, along with hands-on experience with vulnerability management and security tools.

Key Responsibilities

• Own and manage the end-to-end vulnerability management lifecycle, from identification and validation through remediation and closure.
• Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud environments, networks, and applications.
• Analyze and validate vulnerability scan results, including identifying false positives and determining actual exposure.
• Perform risk-based vulnerability prioritization considering factors beyond CVSS/severity, including asset criticality, business impact, exploitability, exposure, and active exploitation.
• Investigate vulnerabilities across Windows and Linux environments and coordinate appropriate remediation activities.
• Assess security vulnerabilities across cloud and endpoint environments.
• Define technical remediation and mitigation steps and work with relevant teams to implement them.
• Document technical findings, evidence, risk, business impact, and recommended remediation actions.
• Drive vulnerability remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams.
• Track remediation progress and ensure vulnerabilities are addressed within defined remediation SLAs.
• Perform remediation validation through re-scanning, technical verification, or other appropriate methods.
• Support endpoint security and vulnerability management activities using relevant security platforms.
• Maintain the vulnerability dashboards, reports, remediation status, and risk documentation.
• Provide regular updates to security and business stakeholders regarding critical findings, remediation progress, exceptions, and outstanding risks.
• Support investigation and response activities for critical or actively exploited vulnerabilities, including zero-day vulnerabilities when required.

Required Qualifications

• 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or a related security domain.
• Hands-on experience in vulnerability assessment and vulnerability management.
• Strong understanding of risk assessment and risk-based vulnerability prioritization, beyond simply relying on CVSS/severity ratings.
• Ability to analyze, investigate, and validate vulnerability scan results.
• Strong knowledge of endpoint security and vulnerability remediation.
• Good understanding of Windows and Linux operating systems from a security perspective.
• Working knowledge of networking and network security fundamentals.
• Understanding basic application security and common application vulnerabilities.

Experience working with some of the following security technologies/tools:

• Wiz
• CrowdStrike
• Nexpose / Rapid7
• Splunk
• AppSpider
• ServiceNow

Additional Qualifications

Ability to document technical security findings and define appropriate remediation/mitigation steps.

Demonstrated experience driving remediation activities across multiple technical teams.

Strong communication, stakeholder management, ownership, and follow-up skills.

Preferred Qualifications

• Experience in Security Operations (SecOps) and/or Vulnerability Management.
• Exposure in security environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Experience with zero-day vulnerability identification, assessment, response, and remediation.
• Experience working with remediation SLAs and vulnerability tracking.
• Familiarity with security exceptions, risk acceptance, compensating controls, and risk treatment processes.
• Experience coordinating remediation across infrastructure, cloud, network, application, and DevOps teams.

Relevant Security Certifications

• CompTIA Security+
• CompTIA CySA+
• GIAC Security Essentials (GSEC)