Vulnerability & Patch Management

Infosys; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Infosys is looking for a professional in Hyderabad, India to manage and respond to security vulnerabilities across systems. The role involves performing vulnerability scans, coordinating with teams for remediation, and ensuring compliance with security standards.

Candidates should have experience in vulnerability assessment tools and a good understanding of risk management. Strong coordination skills are essential for this position.

Qualifications

• Experience in vulnerability scanning tools and methodologies.
• Understanding of risk assessment and remediation techniques.
• Ability to coordinate with multiple teams for security compliance.

Responsibilities

• Perform vulnerability scanning across servers, endpoints, network devices, and applications.
• Analyze vulnerability reports, prioritize risks, and recommend remediation.
• Plan, test, and deploy patches across OS, applications, and middleware.
• Ensure timely patching aligned with security SLAs and compliance requirements.
• Coordinate with system, application, and infrastructure teams for remediation.
• Track and report vulnerability status, risk posture, and patch compliance.
• Automate patch management processes wherever possible.
• Conduct regular audits and compliance checks.
• Investigate and respond to security incidents related to vulnerabilities.
• Maintain documentation, SOPs, and runbooks.

Job description

• Perform vulnerability scanning across servers, endpoints, network devices, and applications
• Analyze vulnerability reports, prioritize risks (CVSS scoring), and recommend remediation
• Plan, test, and deploy patches across OS, applications, and middleware
• Ensure timely patching aligned with security SLAs and compliance requirements
• Coordinate with system, application, and infrastructure teams for remediation
• Track and report vulnerability status, risk posture, and patch compliance
• Automate patch management processes wherever possible
• Conduct regular audits and compliance checks (ISO, PCI-DSS, etc.)
• Investigate and respond to security incidents related to vulnerabilities
• Maintain documentation, SOPs, and runbooks