Vulnerability Management Consultant_MAST

KPMG Global Services; Bengaluru; On-site; INR 1,600,000 - 2,200,000; Full time

Job summary

KPMG Global Services in Bengaluru seeks a security professional with 4–8 years of experience in vulnerability management. You will oversee remediation programs across Windows, Linux, cloud and network environments, and prepare executive dashboards and governance reports.

You will work with stakeholders across teams, evaluate new security tools, and ensure compliance with security standards. Proficiency with Qualys VMDR, ServiceNow and SIEMs is preferred.

Qualifications

• 4-8 years of relevant experience in vulnerability management, preferably in a professional services organization.
• Strong knowledge of Vulnerability Lifecycle Management, Threat Management, CVE Analysis, CVSS Scoring, and Risk Assessment.
• Hands-on experience with tools such as Qualys VMDR, ServiceNow, Power BI, Tableau, Splunk, JIRA, Azure DevOps, Microsoft Defender, and CrowdStrike.

Responsibilities

• Experience managing vulnerability remediation programs across Windows, Linux, Cloud (AWS/Azure), Network, and Application environments.
• Experience preparing executive-level reports, dashboards, governance metrics, RCA, POA, and remediation tracking.

Skills

Vuln lifecycle

Threat management

CVE analysis

CVSS scoring

Risk assessment

Qualys VMDR

Windows

Linux

Cloud AWS/Azure

Secure coding

Threat intel

Patch Mgmt

Security compliance

Executive reports

Governance metrics

RCA/POA

Remediation tracking

Stakeholder mgmt

Cross-functional

ServiceNow

Power BI

Tableau

Splunk

JIRA

Azure DevOps

Microsoft Defender

CrowdStrike

New tools eval

CISSP

CEH

Security+

Qualys Specialist

Azure Security

AWS Security

Tools

Qualys VMDR

ServiceNow

Power BI

Tableau

Splunk

JIRA

Azure DevOps

Microsoft Defender

CrowdStrike

Job description

Required Qualifications and Experience

• Strong knowledge of Vulnerability Lifecycle Management, Threat Management, CVE Analysis, CVSS Scoring, and Risk Assessment.


• Minimum three (3) years of experience with vulnerability management platforms such as Qualys VMDR and related security tools.


• Experience managing vulnerability remediation programs across Windows, Linux, Cloud (AWS/Azure), Network, and Application environments.


• Strong understanding of secure coding concepts, threat intelligence, patch management, and security compliance requirements.


• Experience preparing executive-level reports, dashboards, governance metrics, RCA, POA, and remediation tracking.


• Hands-on experience with tools such as Qualys VMDR, ServiceNow, Power BI, Tableau, Splunk, JIRA, Azure DevOps, Microsoft Defender, and CrowdStrike.


• Strong stakeholder management, communication, escalation management, and cross-functional collaboration skills.


• Ability to quickly evaluate and adopt new security tools and technologies to support client and business requirements.


• Industry certifications preferred: CISSP, CEH, Security+, Qualys Certified Specialist, Azure Security, or AWS Security certifications.

Prior Experience

The candidate must have 4 to 8 years of relevant experience in a similar role, preferably in a professional services organization.