Vulnerability Management Engineer (Hybrid)

Kaplan International; Bengaluru; Hybrid; INR 1,500,000 - 2,500,000; Full time

Benefits offered by this job

Hybrid work model

Tuition assistance

Health benefits

Paid time off

Gratuity

Job summary

Kaplan International seeks a Vulnerability Management Engineer in Bangalore, India, to own end-to-end VM lifecycle from discovery to remediation. You will work with IT, cloud, and engineering teams to reduce exposure and support incident response.

You will manage scanners like Tenable, Qualys, and Rapid7, develop remediation guidance for Windows, Linux, cloud, and container environments, and contribute to security posture improvements across the organisation.

Qualifications

• Bachelor’s degree in CS/IS/Cybersecurity or equivalent experience.
• 5+ years of information security with vulnerability management and incident response.
• Hands-on with enterprise VM tools: policy design, authenticated/agent scans, asset coverage.

Responsibilities

• Administer and optimise VM platforms across on-prem, cloud, container, and endpoint environments.
• Perform remediation analysis, validate findings, reduce false positives, prioritise risk.
• Collaborate with IT, cloud, app, and endpoint teams to close items within SLAs.
• Respond to security incidents and exploits, triage alerts, support containment and recovery.
• Develop security playbooks, participate in tabletop exercises, and drive post‑incident reviews.
• Develop dashboards and reports for leadership showing risk trends and remediation progress.
• Automate workflows using scripting and APIs, integrate tools with ITSM/CMDB/CIEM.
• Support audits and evidence collection for ISO27001, PCI DSS, SOX, SOC2.

Skills

Vulnerability management

Incident response

Risk analysis

Threat intelligence

Communication

Scripting

SIEM/EDR

Cloud security

ISO27001

GCIH/GCFA

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity

Tools

Tenable

Qualys

Rapid7

CrowdStrike Falcon Spotlight

ServiceNow/Jira integration

Job description

Vulnerability Management Engineer (Hybrid)

For more than 80 years, Kaplan has been a trailblazer in education and professional advancement. We are a global company at the intersection of education and technology, focused on collaboration, innovation, and creativity to deliver a best in class educational experience and make Kaplan a great place to work. Our offices in India opened in Bengaluru in 2018. Since then, our team has fueled growth and innovation across the organization, impacting students worldwide. We are eager to grow and expand with skilled professionals like you who use their talent to build solutions, enable effective learning, and improve students’ lives. The future of education is here and we are eager to work alongside those who want to make a positive impact and inspire change in the world around them.

The Vulnerability Management Engineer role will strengthen the security posture of the KNA organisation by owning the end-to-end vulnerability management lifecycle, from discovery and analysis through remediation and verification. This position will operate and optimise enterprise vulnerability management tools, deliver in-depth remediation analysis that prioritises the risks that matter most, and serve as a key responder during security incidents and actively exploited vulnerabilities. The Vulnerability Management Engineer will partner closely with IT, cloud, and engineering teams to drive measurable reductions in exposure and time to remediate.

Primary Responsibilities

• Administer and optimise enterprise vulnerability management platforms (e.g., Tenable, Qualys, Rapid7, CrowdStrike Falcon Spotlight) across on-premises, cloud, container, and endpoint environments, ensuring complete asset coverage, authenticated scanning, and reliable, current findings.
• Perform in-depth vulnerability remediation analysis by validating findings, eliminating false positives, identifying root causes and recurring patterns, and prioritising risk based on exploitability, threat intelligence (e.g., CISA KEV, EPSS), asset criticality, and business impact.
• Partner with infrastructure, cloud, application, and endpoint owners to define remediation plans, provide clear technical guidance, and track progress to closure against defined SLAs, escalating overdue or high‑risk items to drive measurable reductions in exposure and time to remediate.
• Respond to security incidents and actively exploited vulnerabilities (e.g., zero‑day events) by triaging alerts, rapidly identifying affected assets, and supporting investigation, containment, eradication, and recovery with the SOC and incident response team.
• Participate in a rotational on‑call schedule that supports follow‑the‑sun incident coverage with US‑based colleagues.
• Strengthen incident response readiness by developing and maintaining playbooks and runbooks for vulnerability‑driven incidents, participating in tabletop exercises, and leading post‑incident reviews that capture lessons learned and drive control improvements.
• Develop and maintain dashboards, metrics, and executive reporting (e.g., mean time to remediate, SLA compliance, risk reduction trends, scan coverage) that give security leadership and control owners clear visibility into vulnerability risk.
• Automate vulnerability management workflows, such as ticket creation, asset‑owner mapping, risk enrichment, and reporting, using scripting and APIs, and integrate vulnerability tools with ITSM, CMDB, SIEM, and EDR platforms to reduce manual effort and accelerate remediation.
• Manage the vulnerability exception and risk acceptance process by documenting compensating controls, confirming appropriate approvals, and tracking exceptions through to expiry.
• Support audits and compliance activities by providing evidence and reporting for vulnerability and patch management controls aligned to ISO 27001, PCI DSS, SOX, SOC2, and other relevant standards, and evaluate emerging tools and threat intelligence to continuously improve the program.

Hybrid Schedule

3 days remote / 2 days in office 30‑day notification period preferred.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Systems (IS), Cybersecurity, or related field; or an equivalent combination of training and progressively responsible experience that will result in the required specialized knowledge and abilities to perform the assigned work in lieu of degree.
• 5+ years of information security experience, including hands‑on vulnerability management and security incident response experience.
• Hands‑on expertise with enterprise vulnerability management tools (e.g., Tenable, Qualys, Rapid7, CrowdStrike Falcon Spotlight), including scan policy design, authenticated and agent‑based scanning, asset coverage management, and false‑positive validation.
• Very strong vulnerability remediation analysis skills, including risk‑based prioritisation using CVSS, EPSS, CISA KEV, threat intelligence, and asset context, and the ability to translate findings into clear, actionable remediation guidance for Windows, Linux, network, cloud, and container environments.
• Demonstrated incident response experience, including triage, investigation, containment, eradication, recovery, and post‑incident review, with working knowledge of SIEM and EDR platforms and the MITRE ATT&CK framework.
• Strong understanding of vulnerability, patch, and configuration management practices and of security frameworks and standards (e.g., NIST, ISO27001, PCIDSS, CIS Benchmarks).
• Excellent analytical, problem‑solving, and communication skills, with the ability to influence technical and non‑technical stakeholders and to work both independently and collaboratively in a fast‑paced environment.
• Relevant certifications such as GCIH, GCFA, CISSP, CEH, or Security+ are highly desirable.

Primary Qualifications

• Experience with cloud security posture and vulnerability management in AWS, Azure, or GCP, including container and Kubernetes security.
• Ability to automate security and operational tasks using scripting languages (e.g., Python, PowerShell, Bash) and APIs.
• Experience integrating vulnerability data with ITSM and workflow tools (e.g., ServiceNow, Jira) to orchestrate remediation.
• Experience supporting audit evidence requests for SOX, PCIDSS, or ISO27001 controls.

Beyond base salary, our comprehensive total rewards package includes:

• Hybrid work model provides a flexible work/life balance.
• Voluntary Provident Fund is an additional voluntary contribution scheme associated with the statutory Employee Provident Fund (EPF).
• Our Gift of Knowledge Program provides tuition assistance and substantial discounts for our employees and close family members.
• Comprehensive health benefits new hire eligibility starts on day1 of employment.
• Generous Paid Time Off includes National holidays(10), Earned leaves(15), sick leave(12), plus one (1) volunteer day to participate and give back to our local communities.
• Gratuity is applicable upon completion of 5 years as per the Gratuity Act.

We are committed to providing a supportive and rewarding work environment where every employee can thrive. You can learn more about our full benefits package and total rewards philosophy here.

At Kaplan, we believe in attracting, rewarding, and retaining exceptional talent. Our compensation philosophy is designed to be competitive within the market, reflecting the value we place on the skills, experience, and contributions of our employees, while taking into account labor market trends and total rewards. The specific compensation offered will be determined by a variety of factors, including but not limited to the candidate's qualifications, relevant experience, education, skills, and market data.

Location Bangalore, KA, India

Additional Locations

Employee Type Employee Job Functional Area Information Security Business Unit 00091 Kaplan Higher ED

Diversity & Inclusion Statement

Kaplan is committed to cultivating an inclusive workplace that values diversity, promotes equity, and integrates inclusivity into all aspects of our operations. We are an equal opportunity employer and all qualified applicants will receive consideration for employment regardless of age, race, creed, color, national origin, ancestry, marital status, sexual orientation, gender identity or expression, disability, veteran status, nationality, or sex. We believe that diversity strengthens our organization, fuels innovation, and improves our ability to serve our students, customers, and communities. Learn more about our culture here.

Kaplan considers qualified applicants for employment even if applicants have an arrest or conviction in their background check records. Kaplan complies with related background check regulations, including but not limited to, the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. There are various positions where certain convictions may disqualify applicants, such as those positions requiring interaction with minors, financial records, or other sensitive and/or confidential information.

Kaplan is a drug‑free workplace and complies with applicable laws.

Kaplan, Inc. is a global educational services company, with about 10,000 employees and operations in 26 countries. We serve 1.2 million students each year and partner with about 4,000 educational institutions and 13,000 corporations across the world. Kaplan is the largest subsidiary of Graham Holdings Company (NYSE: GHC). Across its 85‑year history, first as a pioneer of the test prep industry, then as an early online education leader, and now as a global education provider, Kaplan has been recognized for expanding educational access and improving student outcomes through innovative uses of technology, instructional design, and learning science. We’ve been recognized as a Top Workplace for Innovators and Brands That Matter (Fast Company); and as one of America’s Top 100 employers (Forbes). Kaplan’s US‑based businesses provide individuals, educational institutions, businesses and governments a broad array of services, supporting our students and partners to meet their diverse and evolving needs throughout their professional journeys. Among the services provided are test preparation, coaching and advising department and ref. [subject?] The test preparation and professional products are all similar poss …