Vulnerability Management

NITYO; Pune District; On-site; INR 1,200,000 - 1,500,000; Full time

Job summary

NITYO is seeking a qualified professional in Pune District, India, to focus on network security and vulnerability management. Candidates should have 8-10 years of experience and strong hands-on expertise in Palo Alto Prisma SD WAN, along with the ability to conduct vulnerability assessments and integrate security frameworks.

The role requires certification in Palo Alto and Cisco, as well as familiarity with SASE architectures. Successful applicants will contribute to network assessments, implement SD WAN solutions, and ensure security compliance.

Qualifications

• 8-10 years of experience in network security or vulnerability management.
• Strong knowledge of Palo Alto and Cisco certifications.
• Experience with SASE/SSE transformation programs.

Responsibilities

• Perform regular vulnerability assessments on network devices.
• Conduct network security scans using industry-standard tools.
• Integrate Prisma SD WAN with Palo Alto NGFW for unified enforcement.
• Lead migrations to SD WAN and troubleshoot performance issues.

Skills

Vulnerability assessments

Network security scans

Palo Alto Prisma SD WAN

Routing & Switching

SASE integration

Tools

Nessus

Qualys

Rapid7

OpenVAS

Job description

Key Responsibilities

Vulnerability Management

• Perform regular vulnerability assessments on network devices (routers, switches, firewalls, load balancers).
• Conduct network security scans using tools like Nessus, Qualys, Rapid7, OpenVAS.
• Analyze scan results and prioritize vulnerabilities based on severity and business impact.
• Work with network and infra teams to remediate vulnerabilities and track closure.
• Perform configuration reviews & hardening as per CIS/NIST standards.
• Support penetration testing activities (internal/external).
• Monitor and respond to security alerts and incidents related to network vulnerabilities.
• Maintain vulnerability reports, dashboards, and compliance documentation.
• Ensure adherence to security frameworks (ISO 27001, PCI-DSS, NIST).
• Automate vulnerability scanning and reporting where possible.
• Participate in risk assessments and audit activities.

Enterprise Networking

Strong fundamentals and hands on experience with:

• Routing & Switching (BGP, OSPF, VLANs)
• Enterprise WAN and branch networking
• Experience with Cisco LAN / Switching / Wireless for branch and campus environments
• Understanding of QoS design for voice, video, and critical applications

Experience: 8-10 years in Network Security/ vulnerability management.

Prisma SD WAN (Core Focus)

• Hands on expertise in Palo Alto Prisma SD WAN architecture, including: ION devices (branch, DC, cloud), Controllers, management portals, and analytics
• Design and implement application aware path selection, SLA based policies, and intelligent link steering
• Configure and optimize traffic failover, load balancing, and link remediation
• Perform pilot implementations and large scale SD WAN rollouts
• Lead migration from legacy WAN / MPLS to SD WAN, ensuring minimal business impact
• Troubleshoot complex SD WAN performance and stability issues

Security & SASE Integration

• Integrate Prisma SD WAN with Palo Alto NGFW for unified security enforcement
• Experience with Fortinet / FortiGate firewalls in hybrid environments
• Exposure to SASE architectures, including Zscaler (ZIA / ZPA) and/or Netskope
• Solid understanding of Zero Trust access models
• Knowledge of cloud delivered security enforcement and secure internet breakout designs

Required certifications

• Palo Alto certifications (PCNSE / Prisma SD WAN)
• Cisco certifications (CCNP / Meraki specific exposure)
• Experience in SASE/SSE transformation programs