Vulnerability / Devsecops / Network / SOC / Threat Analysis

NITYO; Dadri; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

NITYO is seeking a Vulnerability Management and Incident Response Engineer to identify, assess, and coordinate remediation of security vulnerabilities across enterprise infrastructure, endpoints, applications, and cloud environments. The role also supports incident response activities, forensic evidence collection, containment, and post-incident remediation.

The candidate will manage the vulnerability lifecycle, coordinate with SOC and infrastructure teams, and contribute to risk-based reporting

Qualifications

• Hands-on experience with at least one enterprise vulnerability management platform.
• Experience with incident response / endpoint investigation tools.
• Understanding CVE, CVSS, and vulnerability remediation concepts.
• Windows, Linux, network device, and cloud vulnerability assessment.
• Patch management and configuration hardening.

Responsibilities

• Plan and execute vulnerability scans across servers, endpoints, and cloud workloads.
• Configure and maintain vulnerability scanning tools.
• Validate scan coverage, credentials, and asset discovery.
• Prioritize vulnerabilities based on severity and business impact.
• Coordinate remediation with infrastructure, network, cloud, and applications teams.
• Prepare risk-based vulnerability dashboards and reports.
• Participate in security incident investigation and response.
• Collect logs and evidence for forensics and post-incident reviews.

Skills

Vulnerability management

Incident response

Log analysis

Forensics basics

Threat investigation

Tools

Tenable Nessus

Tenable VMDR

Qualys VMDR

Rapid7 InsightVM

Burp Suite Pro

OWASP ZAP

Invicti

Defender for Cloud

AWS Inspector

Microsoft Defender for Endpoint

CrowdStrike Falcon

Microsoft Sentinel

Splunk

Job description

Job Title: Vulnerability Management G Incident Response Engineer Role Overview

Responsible for identifying, assessing, prioritizing, and coordinating remediation of security vulnerabilities across enterprise infrastructure, endpoints, applications, and cloud environments. The role also supports incident response activities, forensic evidence collection, containment, and post-incident remediation. The candidate should be capable of managing the vulnerability lifecycle independently and supporting structured incident response for medium- and high-severity incidents.

Key Responsibilities:

• Plan and execute vulnerability scans across servers, endpoints, network devices, cloud workloads, and supported assets.
• Configure and maintain vulnerability scanning tools.
• Validate scan coverage, credentials, and asset discovery.
• Analyze vulnerability reports and identify false positives.
• Support authenticated and unauthenticated scanning as appropriate.
• Prioritize vulnerabilities based on severity, exploitability, asset criticality, and business impact.
• Coordinate remediation with infrastructure, network, cloud, and application teams.
• Track remediation progress against defined SLAs.
• Perform rescans and validate remediation effectiveness.
• Escalate overdue critical vulnerabilities and unresolved risks.
• Support exception and risk acceptance processes.
• Participate in security incident investigation and response.
• Support incident triage, scoping, and containment.
• Collect relevant logs, endpoint telemetry, and other evidence.
• Coordinate with SOC, network, endpoint, and infrastructure teams.
• Support eradication and recovery activities.
• Prepare incident reports and lessons-learned documentation.
• Prepare risk-based vulnerability dashboards and management reports.
• Track remediation metrics and recurring security weaknesses.
• Support audit, compliance, and risk assessments.
• Maintain vulnerability management procedures and incident response playbooks.

Tools and Technologies

Category Tools

Vulnerability Scanning: Tenable Nessus / Tenable Vulnerability Management, ?ualys VMDR, Rapid7 InsightVM

Web Application Scanning: Burp Suite Professional, OWASP ZAP, Invicti (where deployed) Cloud Vulnerability: Defender for Cloud, AWS Inspector, cloud-native security tools Endpoint Detection: Microsoft Defender for Endpoint, CrowdStrike Falcon

Incident Response: Velociraptor, KAPE, FTK Imager (where approved), vendor EDR investigation tools Log Analysis: Microsoft Sentinel, Splunk, ?Radar

Threat Intelligence: VirusTotal, MISP, abuse.ch feeds

Recommended recruitment requirement: Hands-on experience with at least one enterprise vulnerability management platform and one incident response / endpoint investigation platform. Technical Skills

• Vulnerability management lifecycle and risk-based prioritization.
• CVE, CVSS, and vulnerability remediation concepts.
• Windows, Linux, network device, and cloud vulnerability assessment.
• Patch management and configuration hardening.
• Incident response lifecycle.
• Basic digital forensics and evidence handling.
• Log analysis and threat investigation.
• Reporting and remediation tracking.