Vulnerability Management

Cloudxtreme; Pune District, Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Cloudxtreme is seeking a detail-oriented Vulnerability Management Analyst with hands-on experience in identifying, assessing, and managing vulnerabilities across enterprise environments. You will support timely detection, prioritization, and remediation of vulnerabilities to strengthen the organization's security posture.

The role involves regular vulnerability scans using Qualys, Tenable, Rapid7, or Nessus; collaboration with IT and cloud teams; and contributing to audits and policy

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 2 years of experience in vulnerability management or related cybersecurity role.
• Familiarity with vulnerability scanning tools (Qualys, Tenable, Rapid7, Nessus).
• Understanding of CVSS scoring, OWASP Top 10, and common vulnerability types.
• Basic knowledge of Windows/Linux, networking, and cloud platforms.
• Strong analytical and problem-solving skills.
• Good communication and documentation abilities.

Responsibilities

• Perform regular vulnerability scans using tools like Qualys, Tenable, Rapid7, or Nessus.
• Analyze scan results, validate findings, and work with IT teams to prioritize and remediate vulnerabilities.
• Track and report on vulnerability remediation progress and compliance metrics.
• Collaborate with infrastructure, application, and cloud teams to ensure secure configurations.
• Maintain and update vulnerability management policies, procedures, and documentation.
• Monitor threat intelligence feeds and correlate with internal vulnerabilities.
• Support patch management efforts and coordinate with relevant stakeholders.
• Assist in internal and external audits related to vulnerability management.
• Participate in security incident response when vulnerabilities are exploited.

Skills

Vulnerability management

Incident response

Threat intelligence

Analytical thinking

Documentation

Education

Bachelor's degree in Computer Science / Information Security

Tools

Qualys

Tenable

Nessus

Rapid7

SIEM tools

Job description

Skill: Vulnerability Management

Level of Hiring: 3 to 5 yrs

Location: Pune / Bangalore

JD :

Vulnerability Mgmt.

Job Summary

We are seeking a motivated and detail-oriented Vulnerability Management Analyst with 2 years of hands-on experience in identifying, assessing, and managing vulnerabilities across enterprise environments. The ideal candidate will support the organization's security posture by ensuring timely detection, prioritization, and remediation of vulnerabilities.

Key Responsibilities

• Perform regular vulnerability scans using tools like Qualys, Tenable, Rapid7, or Nessus.
• Analyze scan results, validate findings, and work with IT teams to prioritize and remediate vulnerabilities.
• Track and report on vulnerability remediation progress and compliance metrics.
• Collaborate with infrastructure, application, and cloud teams to ensure secure configurations.
• Maintain and update vulnerability management policies, procedures, and documentation.
• Monitor threat intelligence feeds and correlate with internal vulnerabilities.
• Support patch management efforts and coordinate with relevant stakeholders.
• Assist in internal and external audits related to vulnerability management.
• Participate in security incident response when vulnerabilities are exploited.

Required Skills & Qualifications

• Bachelors degree in Computer Science, Information Security, or related field.
• 2 years of experience in vulnerability management or related cybersecurity role.
• Familiarity with vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7).
• Understanding of CVSS scoring, OWASP Top 10, and common vulnerability types.
• Basic knowledge of operating systems (Windows, Linux), networking, and cloud platforms.
• Strong analytical and problem-solving skills.
• Good communication and documentation abilities.

Preferred Qualifications

• Security certifications such as CompTIA Security+, CEH, or similar.
• Experience with SIEM tools and threat intelligence platforms.
• Exposure to regulatory frameworks (e.g., ISO 27001, NIST, GDPR).