Vulnerability Management Engineer

Jobgether; India; Remote; INR 600,000 - 1,100,000; Full time

Job summary

Jobgether is partnering with an organization in India to fill a Vulnerability Management Engineer I role based in Bangalore. This position focuses on monitoring vulnerability scans, validating remediation activities, and maintaining accurate records while collaborating with asset owners and internal teams.

You will gain hands-on experience with ArmorCode, CrowdStrike, and enterprise vulnerability management workflows, with remote-friendly arrangements and opportunities to grow into security

Qualifications

• Foundational knowledge of cybersecurity fundamentals and CVEs.
• Basic networking concepts including IPs, subnets, and ports.
• Familiarity with Windows/Linux, networks, databases, and cloud environments.
• Ability to use security dashboards, reports, CSV exports, and tickets.
• Strong attention to detail in validating findings and remediation evidence.
• Clear written communication and stakeholder follow-up skills.
• Willingness to learn enterprise vulnerability management platforms and ITSM tools.
• Proactive, accountable, and able to work remotely with minimal supervision.

Responsibilities

• Validate vulnerability scans and ensure scheduled runs across networks.
• Monitor scanner health, configurations, and scan failures, addressing issues.
• Create and track remediation tickets for scanner issues and findings.
• Support ad hoc rescans and verify remediation effectiveness.
• Maintain remediation records with supporting evidence and validation notes.
• Generate reports from ArmorCode and CrowdStrike to track SLAs and risk.
• Review vulnerability exception requests with owners and approvals.
• Maintain approved vulnerability exceptions in designated platforms.
• Validate CVE information and coordinate remediation with asset owners.
• Coordinate EASM activities and asset ownership mappings.
• Prioritize critical vulnerabilities affecting external security ratings.
• Support security engineering initiatives and automation under guidance.

Skills

Cybersecurity basics

Networking basics

Windows/Linux basics

Documentation

Attention to detail

Written communication

Collaboration

Time management

Remote work

Self-motivation

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

ArmorCode

CrowdStrike

Vulnerability scanners

Dashboard software

Ticketing systems

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vulnerability Management Engineer I based in India.

We are looking for a detail-oriented cybersecurity professional to support enterprise vulnerability management operations and strengthen the organization’s security posture. In this role, you will monitor vulnerability scans, investigate scanning issues, validate remediation activities, and help ensure that security findings are addressed within established timelines. You will work with vulnerability management platforms, security dashboards, ticketing systems, and asset data to track risks and maintain accurate documentation. Collaborating with asset owners and internal technical teams, you will support vulnerability advisories, exception reviews, and external attack surface management activities. The position offers an opportunity to build hands-on experience with enterprise security tools, risk assessment processes, and remediation workflows. As your expertise develops, you may also contribute to security engineering initiatives, automation, and continuous process improvement in a remote working environment.

Accountabilities

• Validate vulnerability scan schedules and confirm that scans run as planned across assigned networks, subnets, and geographic regions.

• Monitor scanner health, assignments, configurations, and scan failures, investigating issues involving offline scanners, authentication, access permissions, and network connectivity.

• Create, update, and follow up on incident and remediation tickets related to scanner failures, scanning issues, and vulnerability resolution.

• Support approved ad hoc rescans for eligible assets, verify hostnames and IP addresses, review vulnerability details, and confirm whether remediation has successfully resolved reported findings.

• Maintain accurate remediation records by attaching scan results, CSV reports, supporting evidence, and clear validation notes to relevant tickets.

• Monitor vulnerability dashboards and generate reports using tools such as ArmorCode and CrowdStrike to track findings, remediation statistics, service-level agreements (SLAs), and evidence requirements.

• Review vulnerability exception requests by validating affected assets, business justifications, supporting evidence, asset and risk owners, exception categories, and approval status.

• Assist with creating and maintaining approved vulnerability exceptions in designated platforms after all required approvals have been obtained.

• Support vulnerability advisories by validating Common Vulnerabilities and Exposures (CVE) information, affected assets, impacted software versions, and remediation follow-up with asset owners.

• Review requests to reassign vulnerability findings, validate ownership evidence, prepare documentation templates, and coordinate reviews with internal stakeholders.

• Assist with External Attack Surface Management (EASM) activities by identifying asset ownership, mapping responsible teams, and coordinating remediation efforts.

• Prioritize immediate follow-up on critical vulnerabilities that could affect external security ratings, risk indicators, or the organization’s security posture.

• Gradually support additional security engineering activities under guidance, including security configuration assessments, asset onboarding validation, approved security template reviews, and troubleshooting of security tooling.

• Contribute to process improvement and automation initiatives while following established security procedures and escalation guidelines.

Requirements

• Basic understanding of cybersecurity fundamentals, including vulnerabilities, risk ratings, CVEs, remediation processes, and security patching.

• Foundational knowledge of networking concepts, including IP addresses, subnets, ports, protocols, and network connectivity.

• Basic familiarity with Windows and Linux operating systems, network devices, databases, and cloud or virtualized environments.

• Ability to work with security dashboards, reports, CSV exports, ticketing systems, and documented operational procedures.

• Strong attention to detail when validating asset information, vulnerability findings, scan results, remediation evidence, and exception requests.

• Good written communication skills, with the ability to document findings clearly, update tickets accurately, and follow up effectively with stakeholders.

• Willingness to learn enterprise vulnerability management platforms, IT service management tools, configuration management database (CMDB) processes, and security operations workflows.

• A proactive and accountable approach to assigned tasks, with the ability to follow issues through to resolution and elevate blockers when necessary.

• Ability to collaborate effectively with internal teams, asset owners, and requestors while maintaining professional communication and accurate records.

• Strong organizational skills, disciplined time management, and the ability to work independently in a remote environment while providing regular progress updates.

• Curiosity, adaptability, and motivation to develop broader cybersecurity and security engineering capabilities.

• Preferred qualification: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related field.

• Preferred certifications or training: CompTIA Security+, CompTIA Network+, Certified in Cybersecurity (CC), or equivalent foundational cybersecurity learning. Certifications are beneficial but not mandatory.

Benefits

• Employment type: Full-time position.

• Location: Bangalore, India, with a remote work arrangement.

• Professional development: Opportunity to gain practical experience in vulnerability management, remediation validation, security monitoring, and enterprise cybersecurity workflows.

• Technical exposure: Hands-on experience with security platforms and tools, including ArmorCode, CrowdStrike, vulnerability scanners, dashboards, and ticketing systems.

• Career progression: Potential to expand into security engineering responsibilities as technical expertise and operational maturity develop.

• Continuous learning: Opportunity to build knowledge of cybersecurity standards, vulnerability assessment, asset management, and security automation.

• Collaborative environment: Work with technical teams and asset owners to address security risks and improve operational processes.

• Flexibility: Remote working environment requiring effective time management, regular communication, and collaboration with internal stakeholders.

• Salary and additional benefits: Compensation, healthcare coverage, paid leave, bonuses, and other employment benefits were not specified in the available job description.