Sr Technical Lead-Cybersecurity

Birlasoft; Dadri; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Birlasoft is seeking a senior cybersecurity professional to lead Vulnerability Management, Attack Surface Management, and Security Governance across the enterprise. You will architect and optimize Nessus, BitSight, and Infoblox solutions, driving risk reduction and remediation programs.

The role demands deep expertise in DNS security, external attack surface, and third-party risk assessment, with leadership across security operations.

Qualifications

• Must have extensive experience leading vulnerability management programs across large enterprises.
• Experience aligning risk-based prioritization with business objectives.
• Strong knowledge of security governance, compliance, and reporting to executives.

Responsibilities

• Lead administration and lifecycle management of Nessus, BitSight, and Infoblox platforms.
• Define and implement enterprise Vulnerability and Risk Management strategies.
• Manage large-scale vulnerability programs across on-prem, cloud, and network environments.
• Develop executive dashboards, KPI/KRI metrics, and remediation tracking reports.
• Drive remediation and governance through cross-functional collaboration.

Skills

Vulnerability Management

Risk Management

Security Governance

Security Operations

Tools

Tenable Nessus

BitSight

Infoblox DDI

Job description

Job Description:

Area(s) of responsibility

Role Summary

We are seeking a highly experienced Cybersecurity professional to lead Vulnerability Management, Attack Surface Management, Security Risk Governance, and Security Infrastructure Operations across the enterprise. The candidate will be responsible for architecting, implementing, and optimizing Tenable Nessus, BitSight, and Infoblox solutions while driving enterprise-wide risk reduction initiatives, vulnerability remediation programs, DNS security, compliance efforts, and cybersecurity governance.

Key Responsibilities

• Lead the administration, engineering, and lifecycle management of Tenable Nessus, BitSight, and Infoblox platforms.
• Define and implement enterprise Vulnerability Management and Risk Management strategies aligned with security and compliance objectives.
• Manage large-scale vulnerability assessment programs across on-premises, cloud, network, server, endpoint, and application environments.
• Establish risk-based vulnerability prioritization methodologies and remediation governance processes.
• Drive vulnerability remediation programs by collaborating with Infrastructure, Cloud, Application, Network, and Security Operations teams.
• Develop executive-level dashboards, KPI/KRI metrics, risk scorecards, and remediation tracking reports.
• Oversee cyber risk exposure monitoring and external attack surface assessment using BitSight.
• Assess third-party security posture, cybersecurity ratings, and supplier risk metrics, and provide strategic recommendations to reduce business risk.
• Lead security posture reviews and risk assessments and provide recommendations to senior leadership.
• Architect, administer, and optimize Infoblox DDI (DNS, DHCP, and IP Address Management) infrastructure.
• Ensure high availability, scalability, performance, and security of enterprise DNS and IP management services.
• Implement DNS security controls, network visibility solutions, and operational best practices.
• Lead upgrades, migrations, patching, capacity planning, performance tuning, and operational enhancements for security platforms.
• Support internal and external audits, regulatory assessments, compliance initiatives, and risk management programs.
• Develop operational standards, governance frameworks, SOPs, runbooks, and service improvement plans.
• Drive automation and process optimization initiatives to improve efficiency and reduce operational risks.
• Engage with vendors and stakeholders to define product roadmaps, resolve complex issues, and evaluate emerging technologies.
• Mentor junior engineers and provide technical leadership across vulnerability management and security infrastructure domains.

Required Skills

Security Platforms

• Tenable Nessus
• BitSight
• Infoblox DDI

Technical Expertise

• Enterprise Vulnerability Management
• Risk-Based Vulnerability Prioritization
• Security Risk Assessment & Governance
• External Attack Surface Management
• Third-Party Risk & Security Ratings
• DNS, DHCP & IP Address Management (DDI)
• DNS Security & Network Infrastructure Security
• Security Compliance & Regulatory Requirements
• Security Architecture & Engineering
• Security Reporting & Executive Dashboarding
• Security Operations & Governance
• Process Automation & Continuous Improvement