VM Engineer- security operation

Davies; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Davies in Pune seeks a Sr Associate – Secops / Vulnerability Detection and Remediation SME to lead vulnerability management across IT, applications, and cloud environments. You will drive detection, prioritization, and remediation, and collaborate with IT, DevOps, and application teams to patch systems.

The role requires deep technical expertise: hands-on patching, scanning with Qualys, Tenable, Rapid7, and designing policies and playbooks.

Qualifications

• Bachelor's degree in computer science, Information Security, or related field.
• 5+ years of experience in vulnerability management or cybersecurity.
• Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.
• Hands-on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc.).
• Excellent analytical, communication, and problem-solving skills.

Responsibilities

• Lead the enterprise-wide vulnerability management program, including detection, prioritization, and remediation.
• Conduct regular vulnerability scans using tools like Qualys, Tenable Nessus, Rapid7, and analyze results to identify risks.
• Collaborate with IT, DevOps, and application teams to ensure timely patching and remediation of vulnerabilities.
• Hands-on experience in patching using different patching tools on different OS, Applications, Cloud and Networks etc.
• Develop and maintain vulnerability management policies, procedures, and playbooks.
• Provide SME-level guidance on scanning signatures, detection capabilities, and remediation strategies.
• Monitor threat intelligence feeds and correlate with internal vulnerability data to assess risk.
• Host remediation meetings with stakeholders and track progress of corrective actions.
• Ensure compliance with industry standards such as NIST, ISO 27001, PCI-DSS, HIPAA.
• Generate detailed reports and dashboards for leadership on vulnerability trends and remediation status.
• Support incident response teams with vulnerability exploitation insights and mitigation strategies.
• Continuously improve scanning, reporting, and remediation processes through automation and orchestration tools (e.g., Service Now, MS Sentinel, Ansible, Terraform, Splunk Phantom).

Skills

Vulnerability modeling

Forensic tools

Automation scripting

SIEM proficiency

OS and cloud knowledge

Vulnerability management

Patch management tools

Education

Bachelor's degree in CS, Info Security, or related

Tools

Qualys VMDR

Tenable.io

Rapid7 InsightVM

Intune

Qualys Patch Management

Automox

WSUS

ServiceNow

MS Sentinel

Job description

VM Engineer- security operation

Department: IT

Employment Type: Permanent - Full Time

Location: Pune

Description

Sr Associate – Secops /The Vulnerability Detection and Remediation SME is responsible for leading the organization's efforts in identifying, assessing, and remediating vulnerabilities across IT infrastructure, applications, and cloud environments. This role requires deep technical expertise, strategic thinking, and the ability to collaborate across teams to ensure a robust security posture.

Key Responsibilities

• Lead the enterprise-wide vulnerability management program, including detection, prioritization, and remediation.
• Conduct regular vulnerability scans using tools like Qualys, Tenable Nessus, Rapid7, and analyze results to identify risks.
• Collaborate with IT, DevOps, and application teams to ensure timely patching and remediation of vulnerabilities.
• Hands-on experience in patching using different patching tools on different OS, Applications, Cloud and Networks etc.
• Develop and maintain vulnerability management policies, procedures, and playbooks.
• Provide SME-level guidance on scanning signatures, detection capabilities, and remediation strategies.
• Monitor threat intelligence feeds and correlate with internal vulnerability data to assess risk.
• Host remediation meetings with stakeholders and track progress of corrective actions.
• Ensure compliance with industry standards such as NIST, ISO 27001, PCI-DSS, HIPAA.
• Generate detailed reports and dashboards for leadership on vulnerability trends and remediation status.
• Support incident response teams with vulnerability exploitation insights and mitigation strategies.
• Continuously improve scanning, reporting, and remediation processes through automation and orchestration tools (e.g., Service Now, MS Sentinel, Ansible, Terraform, Splunk Phantom).

Experience & Education*

• Bachelor's degree in computer science, Information Security, or related field.
• 5+ years of experience in vulnerability management or cybersecurity.
• Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.
• Hands-on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc.).
• Excellent analytical, communication, and problem-solving skills.

Skills, Knowledge & Expertise

• Experience with threat modeling techniques (e.g., STRIDE, DREAD).
• Knowledge of forensic tools and incident response procedures.
• Experience in scripting (e.g., Python, PowerShell) for automation.
• Familiarity with SIEM platforms (e.g., Splunk, Sentinel, QRadar).
• Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.
• Hands-on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).
• Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc.).