Senior Security Engineer – Vulnerability Management

Staples India; Chennai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Staples India Business Innovation Hub Private Limited in Chennai seeks a Senior Security Engineer focusing on Vulnerability Management. You will own vulnerability operations, drive automation, and partner with cybersecurity, infra, and application teams to mature the program.

The role emphasizes risk-based prioritization, AI-assisted triage, and governance, while mentoring junior engineers and ensuring SLAs and reporting align with PCI DSS and SOC 2 requirements.

Qualifications

• Hands-on experience operating vulnerability scanning platforms (Qualys/Tenable/Rapid7).
• Experience with prioritization, remediation SLAs, and metrics reporting.
• Familiarity with OS, networking, cloud, and container fundamentals.
• Experience with scripting/automation (Python/PowerShell/Bash) and REST APIs.
• Experience supporting compliance/audit evidence (PCI DSS, SOC 2).

Responsibilities

• Own day-to-day vulnerability management operations, including scan monitoring and tool maintenance.
• Follow up with asset owners against remediation SLAs and escalate overdue items.
• Triage extension, exception, and false-positive requests through approval workflows.
• Administer and support vulnerability management platforms and integrations.
• Prepare reports and dashboards; support PCI DSS, SOC 2, and customer audits with evidence.
• Write and maintain runbooks; identify repetitive tasks for automation.
• Contribute to maturity projects like new tool evaluations and governance rollouts.

Skills

Vulnerability management

Security operations

Automation

Scripting (Python/PowerShell/Bash)

Compliance and audit evidence

Tools

Qualys

Tenable

Rapid7

ServiceNow

GitHub

Job description

Staples India Business Innovation Hub Private Limited | Permanent

Senior Security Engineer – Vulnerability Management

This role is designed for a cybersecurity engineer with approximately 5+ years of experience in vulnerability management, security operations, and security tooling. The position is the operational backbone of the vulnerability management function, owning day-to-day operational tasks, troubleshooting, remediation follow-up, and tool operations while contributing to ongoing maturity projects. The engineer will partner with cybersecurity, infrastructure, application, and platform teams to evolve vulnerability management into a proactive, risk-based program and to run vulnerability management operations reliably, keep SLAs and reporting on track, and automate repetitive work, under the guidance of senior team members. The role brings depth in areas such as risk-based prioritization, automation and AI-assisted triage, vulnerability disclosure, and exposure management, and mentors junior engineers to scale proven practices.

Duties & Responsibilities

• Own day-to-day vulnerability management operations, including scan monitoring, troubleshooting, and ongoing maintenance of scanning tools, agents, and integrations.
• Review vulnerability assignments, follow up with asset owners against remediation SLAs, and escalates overdue items through defined channels.
• Triage extension, exception, and false-positive requests and route them through the established approval workflow.
• Administer and support vulnerability management and related security platforms and integrations.
• Prepare recurring reports and dashboards, and support PCI DSS, SOC 2, and customer audit requests with accurate vulnerability evidence.
• Write and maintain runbooks, and identify repetitive tasks to automate with scripts, workflows, and APIs.
• Contribute to maturity projects such as new tool evaluations, process improvements, and risk-scoring and governance rollouts.

Technologies

• Qualys, NoName API Security, Seemplicity UVM/UEM, FIM, ServiceNow, CheckmarxOne, Orca Security, GitHub, EASM, CSPM, Rapid7 DAST
• Vulnerability management, exposure management, DAST, API security, SAST, SCA, CSPM, IoT/OT security, threat intelligence, penetration testing, purple teaming
• Python, PowerShell, Bash, REST APIs, SQL, Excel, Power BI, ServiceNow workflows

Requirements

Basic Qualifications

• Hands-on experience operating vulnerability scanning platforms, such as Qualys, Tenable, or Rapid7, including scan configuration, agents, and authenticated scanning.
• Working knowledge of vulnerability prioritization, remediation SLAs, exception handling, and metrics reporting.
• Familiarity with operating systems, networking, cloud, and container fundamentals sufficient to interpret scan findings.
• Experience with scripting or automation, such as Python, PowerShell, or Bash, and with REST APIs.
• Experience supporting compliance and audit evidence requests, such as PCI DSS or SOC 2.

Preferred Qualifications

• Relevant certifications such as Qualys certifications, Security+, CySA+, GCIH, CEH, or equivalent security certifications.
• Experience integrating vulnerability findings into ServiceNow, Jira, or similar ITSM workflows with defined SLAs and ownership tracking.
• Experience with file integrity monitoring (such as Tripwire), API security, or application security tooling is preferred