Vulnerability Management

Birlasoft; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Birlasoft in Hyderabad is seeking a seasoned Vulnerability Management professional with 5+ years of experience to lead and coordinate remediation across global stakeholders.

The role emphasizes assessing vulnerabilities from scanning tools (Qualys, Fortify, Splunk), reporting to senior management, and driving risk-based remediation. Familiarity with cloud security (AWS/Azure) and container tech is a plus.

Qualifications

• At least 5 years of experience in Vulnerability Management Program.
• Experience in coordinating remediation across global stakeholders.
• Familiarity with vulnerability scanning reports and triaging vulnerabilities.

Responsibilities

• Lead vulnerability management program to identify, triage, track and remediate vulnerabilities.
• Drive remediation across cross-functional, global stakeholder groups until closure.
• Produce remediation reports, scorecards and executive-level updates.

Skills

Vulnerability management

Remediation coordination

Cross-functional collaboration

Reporting & analytics

Security awareness

Tools

Qualys

Nexus IQ

Fortify

Keylight

Datamart/Power BI

Splunk

Docker

Kubernetes

AWS

Azure

Job description

Job description for Vulnerability Management – Functional/ Technical skills are as below:

Must have Functional/ Technical Skills.

At least 5 years of experience in Vulnerability Management Program.

Excellent communication and coordination skills.

Security Certifications preferred.

Functional Skills:

• Working on Vulnerability Management Program focused on ensuring that vulnerabilities within the organization are quickly identified, triaged, tracked, and appropriately remediated.
• Working with cross-functional, global stakeholders to drive remediation programs and ensure proper remediation of vulnerabilities till closure.
• Working on various vulnerability scanning reports- Assessing, validating, and triaging vulnerabilities- Ensure organizational vulnerabilities are property documented, tracked, and addressed.
• Working closely with internal stakeholders & Infosec team to address reported vulnerabilities to ensure timely remediation or approved exception and ad-hoc scan.
• Clearly advises stakeholders and technical teams on vulnerabilities, criticality, impacts, and remediation to meet information security standards.
• Develops remediation reports, out briefs, and scorecards addressing risk, vulnerability, and organizational progress.
• Providing regular reports and updates to senior management on the status of the vulnerability management program, including progress on remediation efforts and any critical vulnerabilities requiring immediate attention.
• Working on all other Security, Risk & Compliance issues within the Organization.
• Experience in IT, Cybersecurity, Risk/Vulnerability Analysis or Management, or related fields.
• Strong knowledge of vulnerability management processes, tools, best practices, and vulnerability validation and triaging.
• Experience with industry-standard enterprise vulnerability scanning offerings, such as Qualys, Nexus IQ, Fortify, Key-light, Datamart/Power BI, Splunk etc.
• Vulnerability Management experience within containerization platforms (Docker, Kubernetes, etc.) and major cloud environments (AWS, Azure etc.)- Container vulnerabilities.
• Familiar with security frameworks and standards, such as PCI DSS, NIST, ISO 27001, OWASP Top 10, or Critical Security Controls.
• Good to have Audit experience and working with internal/External auditors (PCI DSS, FRB, OCC etc.)

Technical Skills:

Required skills

• Good to have – Vulnerability Management and AI.
• Knowledge of modern, risk-based vulnerability management practices.
• Experience with Vulnerability automation, dashboards, reporting, and workflow integration using any AI tools.
• Basic understanding of GenAI capabilities and their application in Vulnerability Management for analysis, prioritization, reporting, and automation.
• Hands-on knowledge of AI tools such as GitHub Copilot, ChatGPT, Microsoft Copilot, or similar tools for scripting, data analysis, and process automation.
• Exposure to AI agents/agentic workflows and how they can be leveraged to automate vulnerability triage, enrichment, remediation tracking, and reporting.
• Basic ability to develop or leverage AI-powered agents/automation, python scripting for cybersecurity or Vulnerability Management use cases is an added advantage.