Vulnerability Management Engineer_ Exp: 7+ Years

Atyeti; Bengaluru; Hybrid; INR 1,000,000 - 1,300,000; Full time

Job summary

Atyeti Inc. in Bengaluru seeks a Security Operations specialist to manage vulnerability and exposure risks, triage tickets, coordinate remediation, and report on status to stakeholders.

You will work with scanners and ITSM tooling, maintain data quality, and communicate clearly with non-security owners while prioritizing work in a high-volume environment.

Qualifications

• Experience with vulnerability management and remediation workflows.
• Familiar with vulnerability scanners and attack surface tools.
• Ability to communicate risk to non-security stakeholders.

Skills

Vulnerability fundamentals

Exposure management basics

Triage and ticketing

Remediation tracking

Tools, vendor-agnostic

Data handling

Communication

Working habits

Tools

CrowdStrike Falcon Spotlight

Rapid7 InsightVM

Tenable

Qualys

Cortex Xpanse

ServiceNow Vulnerability Response

Microsoft Defender

Python

PowerShell

SQL

Job description

Role & responsibilities

Required skills

• Vulnerability fundamentals: CVE, CVSS, EPSS, CISA KEV, severity versus risk, common vulnerability classes and remediation methods (patching, configuration, upgrades, compensating controls).
• Exposure management basics: internet-facing assets and services, end-of-life software, misconfigurations, attack surface findings.
• Triage and ticketing: validation, de-duplication, scoping, ownership lookup, SLA-based due dates, clear ticket writing, escalation paths.
• Remediation tracking: follow-up discipline, verification by re-scan or re-detection, exception and risk-acceptance handling with expiry dates.
• Tools, vendor-agnostic: vulnerability scanners and endpoint security consoles, attack surface tooling, CMDB and asset inventories, ITSM ticketing.
• Data handling: intermediate Excel (filters, pivot tables, lookups), basic data quality checks, accurate record keeping.
• Communication: plain-language explanations for non-security owners, concise status reporting, professional follow-up.
• Working habits: attention to detail, ownership of a queue, ability to prioritize under volume, discipline in secure environments.

Nice to have, including certifications

• Hands-on experience with CrowdStrike Falcon Spotlight, Rapid7 InsightVM, Tenable or Qualys; Cortex Xpanse or another external attack surface management tool; ServiceNow Vulnerability Response; Microsoft Defender.
• Scripting basics (Python or PowerShell) or SQL for queue analysis and reporting.
• Exposure to OT environments or manufacturing sites.