VM Engineer- security operation

Davies Shared Services; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Davies Shared Services is hiring a Sr Associate – Secops to lead vulnerability discovery and remediation across IT infrastructure, applications, and cloud environments. You will drive enterprise vulnerability programs, coordinate with IT, DevOps, and app teams, and shape policy and playbooks for safer systems.

The role demands deep technical expertise, cross-team collaboration, and hands-on patching across mixed environments. Strong knowledge of security standards and reporting is essential.

Qualifications

• Bachelor’s degree in computer science, information security, or related field.
• 5+ years in vulnerability management or cybersecurity.
• Strong knowledge of Windows, Linux, networks, and cloud platforms.
• Hands-on with vulnerability management platforms (Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (Intune, Qualys, PatchmyPC, Automox, WSUS, etc).
• Excellent analytical, communication, and problem-solving skills.

Responsibilities

• Lead the enterprise-wide vulnerability management program and remediation.
• Conduct regular vulnerability scans using tools like Qualys, Nessus, Rapid7 and analyze results.
• Collaborate with IT, DevOps, and application teams for timely patching.
• Hands-on patching across OS, applications, cloud, and networks.
• Develop and maintain vulnerability policies, procedures, and playbooks.
• Provide SME guidance on scanning signatures and remediation strategies.
• Monitor threat intelligence feeds and correlate with internal data.
• Host remediation meetings and track corrective actions.
• Ensure compliance with NIST, ISO 27001, PCI-DSS, HIPAA.
• Generate detailed reports and dashboards on vulnerability trends.
• Support incident response with vulnerability insights.
• Improve scanning and remediation with automation (ServiceNow, MS Sentinel, Ansible, Terraform, Splunk Phantom).

Skills

Vulnerability management

Cybersecurity

Analytical skills

Communication skills

Problem solving

Automation scripting

Python

PowerShell

Threat modeling

Education

Bachelor’s degree in CS/Info Security

Tools

Qualys VMDR

Tenable.io

Rapid7 InsightVM

Intune

Automox

WSUS

ServiceNow

MS Sentinel

Terraform

Splunk

Job description

Department: IT

Employment Type: Permanent - Full Time

Location: Pune

Description

Sr Associate – Secops /The Vulnerability Detection and Remediation SME is responsible for leading the organization's efforts in identifying, assessing, and remediating vulnerabilities across IT infrastructure, applications, and cloud environments. This role requires deep technical expertise, strategic thinking, and the ability to collaborate across teams to ensure a robust security posture.

Key Responsibilities

• Lead the enterprise-wide vulnerability management program, including detection, prioritization, and remediation.
• Conduct regular vulnerability scans using tools like Qualys, Tenable Nessus, Rapid7, and analyze results to identify risks.
• Collaborate with IT, DevOps, and application teams to ensure timely patching and remediation of vulnerabilities.
• Hands‑on experience in patching using different patching tools on different OS, Applications, Cloud and Networks etc.
• Develop and maintain vulnerability management policies, procedures, and playbooks.
• Provide SME-level guidance on scanning signatures, detection capabilities, and remediation strategies.
• Monitor threat intelligence feeds and correlate with internal vulnerability data to assess risk.
• Host remediation meetings with stakeholders and track progress of corrective actions.
• Ensure compliance with industry standards such as NIST, ISO 27001, PCI-DSS, HIPAA.
• Generate detailed reports and dashboards for leadership on vulnerability trends and remediation status.
• Support incident response teams with vulnerability exploitation insights and mitigation strategies.
• Continuously improve scanning, reporting, and remediation processes through automation and orchestration tools (e.g., Service Now, MS Sentinel, Ansible, Terraform, Splunk Phantom).

Experience & Education*

• Bachelor’s degree in computer science, Information Security, or related field.
• 5+ years of experience in vulnerability management or cybersecurity.
• Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.
• Hands‑on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc).
• Excellent analytical, communication, and problem-solving skills.

Skills, Knowledge & Expertise

• Experience with threat modeling techniques (e.g., STRIDE, DREAD).
• Knowledge of forensic tools and incident response procedures.
• Experience in scripting (e.g., Python, PowerShell) for automation.
• Familiarity with SIEM platforms (e.g., Splunk, Sentinel, QRadar).
• Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.
• Hands‑on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc).