Vulnerability Management Lead

SHI Solutions India Pvt. Ltd.; Hyderabad; Sur place; INR 2 800 000 - 4 200 000; Plein temps

Résumé du poste

SHI Solutions India Pvt. Ltd. seeks an experienced Vulnerability Management Lead to drive enterprise-wide vulnerability management operations and governance.

You will oversee discovery, risk prioritisation, remediation, SLA management, and executive reporting across infrastructure, cloud, applications, IAM, and patch management teams. The ideal candidate has 6–10 years in cybersecurity with hands-on expertise in Tenable, Rapid7/InsightVM, Tanium, and TruOps, plus experience leading teams and

Qualifications

• 6–10 years of cybersecurity experience.
• Minimum 2 years of experience leading teams or managing vulnerability programmes.
• Hands-on experience with Tenable, Rapid7/InsightVM, Tanium, vulnerability assessment, CVE/CVSS analysis, remediation governance, and SLA management.
• Experience in executive reporting, stakeholder management, and customer-facing engagements.
• Exposure to TruOps, Cyberfusion, Okta, CyberArk, CrowdStrike, and SentinelOne is highly preferred.
• Experience supporting US-based customers and working during US business hours is preferred.

Responsabilités

• Lead end-to-end Vulnerability Management programme across servers, endpoints, networks, cloud, applications, IAM, and privileged access platforms.
• Define and manage vulnerability scanning strategies, authenticated scan coverage, remediation governance, and exception management.
• Analyse and validate vulnerability findings from Tenable and Rapid7/InsightVM, prioritising risks based on CVSS, exploitability, asset criticality, and business impact.
• Collaborate with infrastructure, patch management, application, endpoint security, and IAM teams to drive timely remediation.
• Track remediation SLAs, risk acceptance, and compliance using TruOps or similar GRC platforms.
• Partner with patch management teams using Tanium and Automox migration workflows to ensure effective remediation.
• Develop and present executive dashboards and reports covering vulnerability trends, ageing, SLA compliance, remediation performance, and asset coverage.
• Review identity and privileged access vulnerabilities involving Okta and CyberArk.
• Collaborate with endpoint security teams using CrowdStrike and SentinelOne to correlate vulnerability exposure with endpoint risks.
• Define and enhance vulnerability management processes, playbooks, operational runbooks, and reporting standards.
• Lead weekly and monthly vulnerability review meetings with internal stakeholders and US-based customers.
• Mentor Vulnerability Management Engineers and review technical assessments, remediation recommendations, and reporting.
• Ensure alignment with security frameworks such as NIST, CIS Controls, ISO 27001, and PCI-DSS.

Connaissances

Vulnerability Mgmt

Leadership

Executive Reporting

CVSS Analysis

SLA Management

Stakeholder Mgmt

US Client Experience

Threat Intel

Formation

Bachelor's degree in CS/IT/Cybersecurity

Certifications: CISSP, CISM, CompTIA Security+

Outils

Tenable

Rapid7/InsightVM

Tanium

Automox

TruOps

Cyberfusion

Okta

CyberArk

CrowdStrike

SentinelOne

Power BI

Excel

ServiceNow

Jira

Description du poste

Job SummaryWe are seeking an experienced

Job Description

Vulnerability Management Lead

Job Summary

We are seeking an experienced Vulnerability Management Lead with 6–10 years of cybersecurity experience to lead enterprise-wide vulnerability management operations. The role is responsible for driving vulnerability discovery, risk prioritisation, remediation governance, SLA management, executive reporting, and cross-functional coordination with infrastructure, application, IAM, endpoint security, and patch management teams. The ideal candidate will have strong hands‑on expertise with Tenable, Rapid7/InsightVM, Tanium, TruOps, and related cybersecurity technologies, along with experience leading teams and supporting global customers.

Key Responsibilities

• Lead the end-to-end Vulnerability Management programme across servers, endpoints, networks, cloud environments, applications, IAM, and privileged access platforms.
• Define and manage vulnerability scanning strategies, authenticated scan coverage, remediation governance, and exception management.
• Analyse and validate vulnerability findings from Tenable and Rapid7/InsightVM, prioritising risks based on CVSS, exploitability, asset criticality, and business impact.
• Collaborate with infrastructure, patch management, application, endpoint security, and IAM teams to drive timely remediation.
• Track remediation SLAs, risk acceptance, and compliance using TruOps or similar GRC platforms.
• Partner with patch management teams using Tanium and Automox migration workflows to ensure effective remediation.
• Develop and present executive dashboards and reports covering vulnerability trends, ageing, SLA compliance, remediation performance, and asset coverage.
• Review identity and privileged access vulnerabilities involving Okta and CyberArk.
• Collaborate with endpoint security teams using CrowdStrike and SentinelOne to correlate vulnerability exposure with endpoint risks.
• Define and enhance vulnerability management processes, playbooks, operational runbooks, and reporting standards.
• Lead weekly and monthly vulnerability review meetings with internal stakeholders and US-based customers.
• Mentor Vulnerability Management Engineers and review technical assessments, remediation recommendations, and reporting.
• Ensure alignment with security frameworks such as NIST, CIS Controls, ISO 27001, and PCI-DSS.

Requirements

Job Requirements

Required Skills & Experience

• 6–10 years of experience in Cybersecurity, Vulnerability Management, Security Operations, or Infrastructure Security.
• Minimum 2 years of experience leading teams, coordinating security operations, or managing vulnerability programmes.
• Strong hands‑on experience with Tenable, Rapid7/InsightVM, Tanium, vulnerability assessment, CVE/CVSS analysis, remediation governance, and SLA management.
• Experience in executive reporting, stakeholder management, and customer‑facing engagements.
• Exposure to TruOps, Cyberfusion, Okta, CyberArk, CrowdStrike, and SentinelOne is highly preferred.
• Experience supporting US-based customers and working during US business hours is preferred.

Tools & Technologies

• Vulnerability Management: Tenable, Rapid7/InsightVM
• Patch Management: Tanium, Automox
• Risk & GRC: TruOps, Cyberfusion
• IAM/PAM: Okta, CyberArk
• Endpoint Security: CrowdStrike, SentinelOne
• Reporting & Ticketing: Power BI, Excel, ServiceNow, Jira

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline (or equivalent experience).
• Preferred certifications include CISSP, CISM, CompTIA Security+, CySA+, CEH, GSEC, Tenable, Rapid7, ITIL Foundation, or equivalent industry certifications.