VM Engineer- Security Operation

MDD Forensic Accountants; Pune District; Presencial; INR 900.000 - 1.500.000; Jornada completa

Descripción de la vacante

MDD Forensic Accountants LLP is seeking a Sr Associate – Secops to lead vulnerability management across IT infrastructure, applications, and cloud environments from Pune. This role requires deep technical expertise and strong collaboration across IT and business units to ensure a robust security posture.

You will manage scanning, detection, and remediation activities, develop playbooks, and provide guidance on remediation strategies while aligning with NIST, ISO 27001, PCI-DSS and HIPAA

Formación

• 5+ years of experience in vulnerability management or cybersecurity.
• Strong knowledge of Windows and Linux, networks, and cloud platforms.
• Hands-on experience with vulnerability management platforms (Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (Intune, Qualys, PatchMyPC, Automox, WSUS).
• Excellent analytical, communication, and problem-solving skills.

Responsabilidades

• Lead the enterprise-wide vulnerability management program across IT and cloud.
• Conduct regular vulnerability scans and analyze results to identify risks.
• Collaborate with IT/DevOps to ensure timely patching and remediation.
• Hands-on patching across OS, applications, cloud, and networks.
• Develop and maintain vulnerability management policies and playbooks.
• Provide SME guidance on scanning signatures, detections, and remediation.
• Monitor threat intel and correlate with internal vulnerability data.
• Host remediation meetings and track corrective actions.
• Ensure compliance with NIST, ISO 27001, PCI-DSS, HIPAA.
• Generate detailed reports and dashboards for leadership on trends.
• Support incident response with vulnerability insights and mitigation.
• Improve scanning and remediation via automation/orchestration tools (ServiceNow, MS Sentinel, Ansible, Terraform, Splunk Phantom).

Conocimientos

Threat modeling

Automation scripting

SIEM expertise

Vulnerability management

Educación

Bachelor's degree in computer science or information security

Herramientas

Qualys VMDR

Tenable.io

Rapid7 InsightVM

Splunk

Ansible

Terraform

Microsoft Defender/ Sentinel

ServiceNow

Automox

WSUS

Descripción del empleo

Job Description:

VM Engineer- security operation

Department: IT

Employment Type: Permanent - Full Time

Location: Pune

Description

Sr Associate – Secops /The Vulnerability Detection and Remediation SME is responsible for leading the organizations efforts in identifying, assessing, and remediating vulnerabilities across IT infrastructure, applications, and cloud environments. This role requires deep technical expertise, strategic thinking, and the ability to collaborate across teams to ensure a robust security posture.

Key Responsibilities

• Lead the enterprise-wide vulnerability management program, including detection, prioritization, and remediation.
• Conduct regular vulnerability scans using tools like Qualys, Tenable Nessus, Rapid7, and analyze results to identify risks.
• Collaborate with IT, DevOps, and application teams to ensure timely patching and remediation of vulnerabilities.
• Hands‑on experience in patching using different patching tools on different OS, Applications, Cloud and Networks etc.
• Develop and maintain vulnerability management policies, procedures, and playbooks.
• Provide SME-level guidance on scanning signatures, detection capabilities, and remediation strategies.
• Monitor threat intelligence feeds and correlate with internal vulnerability data to assess risk.
• Host remediation meetings with stakeholders and track progress of corrective actions.
• Ensure compliance with industry standards such as NIST, ISO 27001, PCI‑DSS, HIPAA.
• Generate detailed reports and dashboards for leadership on vulnerability trends and remediation status.
• Support incident response teams with vulnerability exploitation insights and mitigation strategies.
• Continuously improve scanning, reporting, and remediation processes through automation and orchestration tools (e.g., Service Now, MS Sentinel, Ansible, Terraform, Splunk Phantom).

Experience & Education*

• Bachelor’s degree in computer science, Information Security, or related field.
• 5+ years of experience in vulnerability management or cybersecurity.
• Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.
• Hands‑on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc…).
• Excellent analytical, communication, and problem-solving skills.

Skills, Knowledge & Expertise

• Experience with threat modeling techniques (e.g., STRIDE, DREAD).
• Knowledge of forensic tools and incident response procedures.
• Experience in scripting (e.g., Python, PowerShell) for automation.
• Familiarity with SIEM platforms (e.g., Splunk, Sentinel, QRadar).
• Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.
• Hands‑on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc…).