Vulnerability Management Engineer

Zensar; Pune District; On-site; INR 1,600,000 - 2,200,000; Full time

Job summary

Zensar is seeking an experienced Vulnerability Management professional to lead remediation across Windows Server and workstation environments. You will coordinate with infrastructure, security, and IT teams to ensure timely patching and risk reduction.

The role emphasizes hands-on assessment using tools like Qualys/Tenable/Rapid7 and Defender VM, with focus on risk-based prioritization, reporting, and governance compliance.

Qualifications

• 4-10 years of experience in vulnerability management or related security domains.
• Hands-on experience managing vulnerabilities in enterprise Windows Server/Desktop environments.
• Experience with scanning/assessment tools such as Qualys, Tenable, Rapid7, or Defender VM.
• Experience coordinating remediation across multiple tech teams.
• Strong patch management, security compliance, and risk management understanding.

Responsibilities

• Manage and support enterprise vulnerability management across Windows Server and workstation environments.
• Perform regular vulnerability assessments using approved scanning tools (Qualys, Tenable, Rapid7, Defender VM).
• Analyze scan results, validate findings, and prioritize remediation based on risk and business impact.
• Coordinate remediation with infrastructure, server, desktop, application, and security teams.
• Track remediation progress against SLAs and compliance requirements.
• Lead monthly vulnerability review meetings and provide risk-reduction recommendations.
• Create remediation plans and maintain procedures and runbooks.
• Generate executive dashboards and compliance reports for leadership.

Skills

Vulnerability management

Windows infrastructure

Risk management

Stakeholder management

PowerShell scripting

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Qualys

Tenable

Rapid7

Microsoft Defender Vulnerability Management

SCCM/MECM

Intune

Job description

Education

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

Experience

• 4-10 years of experience in Vulnerability Management, Windows Infrastructure, Cybersecurity Operations, or Endpoint Security.
• Hands-on experience managing vulnerabilities in enterprise Windows Server and Windows desktop environments.
• Experience working with vulnerability scanning and assessment tools such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.
• Experience coordinating remediation activities across multiple technology teams.
• Strong understanding of patch management, security compliance, and risk management processes.

Technical Skills

• Strong knowledge of Windows Server and Windows 10/11 operating systems.
• Experience with vulnerability assessment, risk prioritization, and remediation tracking.
• Familiarity with Microsoft Defender for Endpoint and Defender Vulnerability Management.
• Experience with SCCM/MECM, Microsoft Intune, and Windows patch management processes.
• Knowledge of Active Directory, Group Policy, Entra ID (Azure AD), DNS, DHCP, and Windows security configurations.
• Understanding of CVSS scoring, Common Vulnerabilities and Exposures (CVE), and security risk assessment methodologies.
• Experience reviewing security advisories from Microsoft and other vendors.
• Familiarity with security hardening standards and frameworks such as CIS Benchmarks, NIST, and ISO 27001.
• Basic scripting knowledge using PowerShell for automation, reporting, and remediation activities.
• Understanding of endpoint security, malware protection, and vulnerability lifecycle management.

Preferred Qualifications

• Microsoft Security, Compliance, and Identity certifications.
• CompTIA Security+, CySA+, or equivalent cybersecurity certification.
• Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) (preferred but not mandatory).
• ITIL Foundation certification.
• Experience with cloud security and Azure-based environments.

Key Competencies

• Strong analytical and problem-solving skills.
• Risk-based decision-making and prioritization capabilities.
• Effective stakeholder management and cross-functional collaboration.
• Strong reporting and presentation skills.
• Attention to detail and commitment to security best practices.
• Ability to manage multiple remediation activities in a fast-paced enterprise environment.
• Proactive mindset with a focus on continuous improvement and security posture enhancement.

• Manage and support enterprise vulnerability management activities across Windows Server and Windows workstation environments.
• Perform regular vulnerability assessments using approved scanning tools (e.g., Qualys, Tenable, Rapid7, Microsoft Defender Vulnerability Management).
• Analyze vulnerability scan results, validate findings, and prioritize remediation activities based on risk, severity, and business impact.
• Coordinate with infrastructure, server, desktop, application, and security teams to ensure timely remediation of identified vulnerabilities.
• Track, monitor, and report vulnerability remediation progress against organizational SLAs and compliance requirements.
• Lead monthly vulnerability review meetings and provide recommendations for risk reduction.
• Investigate and resolve false positives, exception requests, and vulnerability-related operational issues.
• Support security audits, regulatory compliance assessments, and internal governance requirements.
• Develop remediation plans for critical and high-risk vulnerabilities affecting Windows operating systems and Microsoft technologies.
• Work closely with SCCM/MECM, Intune, and Windows Operations teams to ensure effective patch deployment and compliance management.
• Monitor emerging security threats, vulnerabilities, and vendor advisories affecting Microsoft platforms.
• Perform root cause analysis for recurring vulnerabilities and recommend preventive controls.
• Create and maintain vulnerability management procedures, remediation runbooks, and technical documentation.
• Generate executive dashboards, compliance reports, remediation metrics, and risk-based reporting for leadership teams.
• Support vulnerability remediation projects, security initiatives, and continuous improvement activities.
• Participate in incident response activities related to security vulnerabilities, malware outbreaks, and zero-day threats.