Technical Lead, Vulnerability Management

Colt Technology Services; Gurugram District; Hybrid; INR 1,500,000 - 2,500,000; Full time

Job summary

Colt Technology Services in India seeks a Vulnerability Management Lead to drive identification, assessment and remediation of security vulnerabilities across the infrastructure.

You will lead framework development, manage scans with Rapid7/Qualys/Nessus, coordinate with stakeholders, design penetration testing, and deliver reports. Candidates should have CEH/ECSA, strong Windows/Linux, and network knowledge.

Qualifications

• Experience in vulnerability management programs and lifecycle.
• Hands-on with scanning tools such as Rapid7, Qualys, Nessus.
• Strong knowledge of Windows and Linux systems.
• Solid networking understanding and ability to interpret threats.
• Certifications CEH or ECSA or equivalent security credentials.
• Degree in IT, Engineering or similar.
• Knowledge of security concepts like attacks, risk & incident management.
• Ability to prepare reports and dashboards for stakeholders.

Responsibilities

• Develop and implement the Colt Vulnerability Management Framework.
• Enhance vulnerability scanning tools and integrate them.
• Design and manage periodic penetration testing exercises.
• Collaborate with stakeholders to define remediation activity.
• Perform vulnerability scans using the management tool.
• Analyze threat data and vulnerabilities on client networks.
• Prepare and send vulnerability reports to stakeholders.
• Manage scan notifications and reporting timelines.
• Configure scans and troubleshoot tool issues.
• Identify false positives and coordinate with vendors to resolve.
• Drive remediation with multiple resolver groups.

Skills

Vulnerability Management

Vulnerability Scanning

Rapid7

Qualys

Nessus

Windows

Linux

Networking

CEH

ECSA

Security certifications

Education

Information Technology / Engineering degree

Tools

Rapid7

Qualys

Nessus

Cisco Firewalls

Juniper Firewalls

SIEM

IPS

Job description

Why we need this role

We are seeking a dynamic and motivated Vulnerability Management Lead to join our rapidly growing program. The ideal candidate will blend cybersecurity expertise with technical analytical skills to support diverse operational needs. The Vulnerability Management Lead will play a crucial role in tracking and managing the identification, assessment, and remediation of security vulnerabilities across the organizations infrastructure and monitoring and reporting on vulnerability and other security compliance status. The role requires collaboration with various partners to ensure that vulnerability assessments and emerging threats are prioritized and advanced. Additionally, the successful candidate will work with management to continuously evolve the vulnerability management program.

What you will do

• The development and implementation of the Colt Vulnerability Management Framework.
• Enhancing the scope and efficiency of current vulnerability scanning and management tools and integration between them.
• Design and manage the periodic penetration testing exercise.
• Collaborating with identified stakeholders to provide specialist guidance and support, ensuring effective vulnerability identification, prioritisation and remediation activity definition.
• Perform Vulnerability scans using Vulnerability Management tool
• Responsible for working with leading team to assist with understanding threat data and vulnerabilities found on client’s network
• Prepare and send error free Vulnerability Management reports to respective stakeholders
• Send scan notification and completion emails as per defined timelines.
• Configuration of vulnerability scans and reporting
• Troubleshooting in case of scan failures or tool-based issues
• Identify false positive and connect with vendor and support teams to resolve it
• Drive remediation connects with multiple stake holders / resolver groups

What we're looking for

• Self-driven individual with vulnerability management function experience.
• Proven experience with products dealing with vulnerability management services which include - Rapid7, Qualys, Nessus etc.
• Strong understanding on Windows systems, Linux systems
• Strong understanding on Networking
• Should have completed certifications like CEH, ECSA or other equivalent security certifications
• Degree in Information Technology, Engineering or similar
• In-depth knowledge of and experience in security concepts such as cyberattacks and techniques, risk management, incident management, threat management, etc.
• Depth insight on all latest vulnerabilities and highlight the risk to client environment
• Proficient in preparation of reports, dashboards and documentations.
• Knowledge /Experience of security technologies such as Cisco/Juniper Firewalls, Application Firewalls, IPS, SIEM, Proxy, NAC, etc.