Threat & Vulnerability Specialist

Protiviti India; Dadri, Gurugram District, Coimbatore District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Protiviti India is seeking an experienced security professional to lead vulnerability management, penetration testing, and security assessments across on-premises and cloud environments. The role involves evaluating risk, prioritizing remediation, and coordinating with infrastructure and development teams to reduce exposure.

The candidate will support continuous threat exposure management and security testing initiatives.

Qualifications

• Bachelor's degree in computer science, IT, cybersecurity, or related field.
• 3-5 years of experience in Vulnerability Management, Penetration Testing, Application Security, or Security Assessments.
• Hands-on experience with vulnerability assessment tools such as Nessus, Qualys, Rapid7, Tenable, or equivalent.
• Experience performing penetration testing of applications, APIs, cloud platforms, and network environments.
• Good understanding of AWS, Azure, cloud security concepts, and common cloud vulnerabilities.
• Knowledge of OWASP Top 10, CVSS scoring, vulnerability prioritization, and remediation methodologies.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Conduct vulnerability assessments across networks, servers, endpoints, cloud platforms, and business applications.
• Perform vulnerability analysis, triage findings, and prioritize remediation based on business risk.
• Track remediation activities and validate closure of identified vulnerabilities.
• Maintain vulnerability registers, remediation status, and management reporting.
• Conduct internal and external penetration testing of applications, APIs, cloud platforms, and network environments.
• Perform security validation of internally developed applications prior to production deployment.
• Identify security weaknesses and provide actionable remediation recommendations.
• Support periodic red team and security testing exercises where required.
• Support and operate the firm's Continuous Threat Exposure Management program.
• Perform regular attack surface reviews and identify emerging exposure risks.
• Monitor security advisories, threat intelligence feeds, and relevant CVEs affecting the organization's technology landscape.
• Recommend preventive and corrective actions to reduce risk exposure.
• Work with Infrastructure, Cloud, Network, and Application teams to address identified vulnerabilities.
• Validate remediation effectiveness and support risk acceptance processes where required.
• Track compliance with vulnerability remediation SLAs.
• Escalate critical and overdue findings to management.

Skills

Vulnerability Management

Penetration Testing

Application Security

Security Assessments

Cloud Security (AWS/Azure)

Threat Intelligence & CVSS

Education

Bachelor's degree in Computer Science, IT, Cybersecurity or related

Tools

Nessus

Qualys

Rapid7

Tenable

Job description

Key Responsibilities

1. Vulnerability Management

1. Conduct vulnerability assessments across networks, servers, endpoints, cloud platforms, and business applications.


2. Perform vulnerability analysis, triage findings, and prioritize remediation based on business risk.


3. Track remediation activities and validate closure of identified vulnerabilities.


4. Maintain vulnerability registers, remediation status, and management reporting.

2. Penetration Testing & Security Assessments

1. Conduct internal and external penetration testing of applications, APIs, cloud platforms, and network environments.


2. Perform security validation of internally developed applications prior to production deployment.


3. Identify security weaknesses and provide actionable remediation recommendations.


4. Support periodic red team and security testing exercises where required.

3. Continuous Threat Exposure Management (CTEM)

1. Support and operate the firm's Continuous Threat Exposure Management program.


2. Perform regular attack surface reviews and identify emerging exposure risks.


3. Monitor security advisories, threat intelligence feeds, and relevant CVEs affecting the organization's technology landscape.


4. Recommend preventive and corrective actions to reduce risk exposure.

4. Remediation & Risk Management

1. Work with Infrastructure, Cloud, Network, and Application teams to address identified vulnerabilities.


2. Validate remediation effectiveness and support risk acceptance processes where required.


3. Track compliance with vulnerability remediation SLAs.


4. Escalate critical and overdue findings to management.

Qualifications & Experience

• Bachelors degree in computer science, Information Technology, Cybersecurity, or a related discipline.


• 3-5 years of experience in Vulnerability Management, Penetration Testing, Application Security, or Security Assessment roles.


• Hands-on experience with vulnerability assessment tools such as Nessus, Qualys, Rapid7, Tenable, or equivalent.


• Experience performing penetration testing of applications, APIs, cloud platforms, and network environments.


• Good understanding of AWS, Azure, cloud security concepts, and common cloud vulnerabilities.


• Knowledge of OWASP Top 10, CVSS scoring, vulnerability prioritization, and remediation methodologies.


• Strong analytical, documentation, and communication skills.