Vulnerability Management

Headsnminds Consultants; Mumbai; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

Headsnminds Consultants in Mumbai seeks a VM Ops Lead to oversee a six-person VM Operations team, coordinating with the IN VM Operations Manager and CISCO/Technology groups to ensure secure virtualization, SBC compliance, and timely reporting.

The role emphasizes security scanning, policy enforcement, vulnerability remediation, audits, and continuous improvement of scanning tools and processes, with strong collaboration across infrastructure and application teams.

Qualifications

• Operational and cyber security background.
• Experience leading a small security operations team.
• Ability to analyze scan results and communicate findings.
• Familiarity with cloud and virtualization security.

Responsibilities

• Serve as backup manager to a VM Operations team of six and coordinate with IN VM Operations Manager.
• Meet regularly with New Group Entity CISO Manager and technology teams.
• Perform and report VM and SBC operations deliverables for new Group Entity.
• Maintain VM scan coverage, SBC compliance, console upgrades, reports, and credential handling.
• Produce monthly VM reporting and remediation tracking.
• Perform regular security policy scans across all technologies and report gaps.
• Collaborate with infrastructure teams to remediate vulnerabilities and ensure SBC compliance.
• Automate scanning/reporting processes to improve efficiency and enforcement.

Skills

Cyber security

Team management

Communication

Time management

Problem solving

Vulnerability scanning

Cloud security

Virtualization

CIS benchmarks

Tools

Rapid7

Tenable

Qualys

Job description

Role & responsibilities

Key Responsibilities:

VM Ops Lead

• Serving as a backup manager to a VM Operations team of six
• Working directly for the IN VM Operations Manager
• Meeting regularly with New Group Entity CISO Manager as well as Technology Teams
• Perform and report on all VM and SBC operations deliverables for new Group Entity
• Maintain new Group Entity VM scan coverage, SBC compliance, console upgrades, control reporting, credential failures, console configuration, scan agents
• Monthly VM reporting and remediation tracking

SBC

• Perform regular security policy scans across all new group entity technologies
• Analyse scan results, report on security gaps, and collaborate with infrastructure teams to remediate vulnerabilities.
• Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments.
• Work closely with infrastructure and application teams to ensure SBC compliance
• Automate scanning and reporting processes to streamline policy enforcement and improve efficiency.
• Track and report on remediation progress, providing technical support to teams as they address vulnerabilities.
• Participate in audits, compliance checks, and regulatory reporting related to environment security.
• Contribute to the continuous improvement of security scanning processes and tools.

Required Skills:

• Operational and cyber security background
• Small team management background
• Strong communication, delegation, decision making, time management and problem-solving skills
• Basic knowledge of CIS benchmarks for Unix, Windows, Networks, AWS, etc.
• Hands-on experience with vulnerability scanning and compliance tools like Rapid7, Tenable, Qualys, or equivalent.
• Understanding of cloud security principles and virtualization environments.
• Analytical mindset with the ability to interpret scan results and communicate recommendations.
• Strong collaboration and communication skills to work with cross-functional teams.

Preferred Skills

• Experience with automation and scripting (e.g., Python, Bash, PowerShell) to automate scanning tasks.
• Familiarity with any DB scripting language
• Exposure to security in financial institutions or highly regulated industries.