Vulnerability Analyst

HCL Technologies Limited; Jigani; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

HCL Technologies Limited is seeking a Vulnerability Specialist to lead patch management and remediation efforts across Windows, Linux, and AIX environments. The role requires hands-on experience with vulnerability scanning tools and cross-functional collaboration to automate and accelerate remediation.

You will develop dashboards, report trends, and coordinate with Infrastructure, Cloud, and Security teams to reduce risk.

Qualifications

• Hands on experience with Patch Management.
• Experience with vulnerability remediation workflows.
• Proficient in scripting to automate remediation tasks.
• Experience with multi-platform OS (Windows, Linux, AIX).

Responsibilities

• Manage the complete vulnerability remediation lifecycle from identification through validation and closure.
• Analyze vulnerability scan results from tools like Qualys VMDR, Nessus, InsightVM, and Defender.
• Prioritize vulnerabilities based on CVSS, EPSS, KEV, business criticality, and asset exposure.
• Coordinate remediation with Infrastructure, Cloud, Database, Middleware, Network, and Application teams.
• Plan and execute monthly patch cycles and emergency security updates.
• Automate remediation workflows using PowerShell, Python, or REST APIs.
• Support internal/external security audits.

Skills

Patch Management

Shell scripting

Python scripting

Perl scripting

AIX

Linux administration

Windows administration

Virtualization

Networking

Chef

Puppet

Tools

BigFix

Antivirus Management

Qualys VMDR

Tenable Nessus

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

PowerShell

REST APIs

Job description

JD - Vulnerability Specialist

Hands on experience with Patch Management

Tools: BigFix, Antivirus Management,

Security: Vulnerability Management and Remediation

Demonstrated ability to become an expert in our products and services, the market and the

competition

Help transform managed services to a fully automated dev-ops approach

Ability to generate ideas for new features through innovation and market / industry expertise

Engage in cross-company solution development task forces

Experienced in AIX, Linux, Windows System administration, virtualization, networking.

Should have experience in Shell, Perl, Python scripting.

Proven skills on configuration tools like chef, puppet.

Key Responsibilities

• Manage the complete vulnerability remediation lifecycle from identification through validation

and closure.

• Analyze vulnerability scan results from tools such as:

Qualys VMDR

Tenable Nessus

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

• Prioritize vulnerabilities based on:

CVSS Score

EPSS

CISA Known Exploited Vulnerabilities (KEV)

Business Criticality

Asset Exposure

• Coordinate remediation with Infrastructure, Cloud, Database, Middleware, Network, and

Application teams.

• Plan and execute monthly patching and emergency security updates.
• Validate remediation through rescans and ensure successful closure.
• Investigate false positives and recommend compensating controls where remediation is not

feasible.

• Track remediation SLAs and elevate overdue vulnerabilities.
• Support Zero-Day vulnerability response and emergency patch deployments.

• Create dashboards and executive reports covering:

Vulnerability trends

MTTR

SLA compliance

Risk exposure

• Automate remediation workflows using PowerShell, Python, or REST APIs.
• Maintain accurate asset inventory and vulnerability ownership.
• Support internal and external security audits.

Technical Skills

Vulnerability Management

• Qualys VMDR
• Tenable Nessus
• Rapid7 InsightVM
• Microsoft Defender VM

Operating Systems

• Windows Server
• Linux (RHEL, Ubuntu, SUSE)
• VMware ESXi

Cloud

• AWS
• Azure
• Google Cloud Platform

Endpoint Management

• Microsoft SCCM
• Microsoft Intune
• BigFix
• Tanium