Vulnerability management Consultant

Tata Consultancy Services; Charlotte (NC); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Medical Coverage

Parental Leaves

401K Plan

Training Reimbursement

Job summary

Tata Consultancy Services in Charlotte, NC is seeking a Senior Vulnerability Manager to lead the end-to-end vulnerability management program across on-premises and cloud environments. You will oversee discovery, assessment, prioritization, remediation tracking, and reporting, collaborating with IT teams to drive timely risk mitigation.

The role requires strong knowledge of CVSS, benchmarks, NIST, MITRE ATT&CK, and hands-on experience with leading vulnerability tooling.

Qualifications

• Strong understanding of vulnerability management fundamentals.
• Experience implementing remediation workflows and risk-based prioritization.
• Familiarity with CVSS scoring and threat intelligence.
• Ability to develop executive dashboards and metrics.

Responsibilities

• Manage end-to-end Vulnerability Management lifecycle including discovery, assessment, prioritization, remediation tracking, and reporting.
• Perform vulnerability assessments across servers, endpoints, network devices, databases, cloud platforms, and applications.
• Analyze vulnerability scan results and recommend remediation strategies based on risk and business impact.
• Collaborate with infrastructure, application, cloud, and operations teams to drive remediation activities.
• Establish and monitor vulnerability remediation SLAs and compliance metrics.
• Conduct risk-based prioritization leveraging CVSS scores, threat intelligence, exploitability, asset criticality, and business context.
• Develop executive dashboards, operational reports, and metrics for leadership review.
• Integrate vulnerability management processes with SIEM, ITSM, CMDB, asset management, and threat intelligence platforms.
• Drive continuous improvement initiatives for vulnerability management programs.

Skills

CVSS Framework

CIS Benchmarks

NIST Cybersecurity Framework

MITRE ATT&CK

Vulnerability exploitation techniques

Education

Bachelor of Computer Science

Tools

Tenable Security Center

Tenable.io

Qualys VMDR

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

ServiceNow Vulnerability Response

Job description

Job Description

• Common vulnerability exploitation techniques


• Manage end-to-end Vulnerability Management lifecycle including discovery, assessment, prioritization, remediation tracking, and reporting.


• Perform vulnerability assessments across servers, endpoints, network devices, databases, cloud platforms, and applications.


• Analyze vulnerability scan results and recommend remediation strategies based on risk and business impact.


• Collaborate with infrastructure, application, cloud, and operations teams to drive remediation activities.


• Establish and monitor vulnerability remediation SLAs and compliance metrics.


• Conduct risk-based prioritization leveraging CVSS scores, threat intelligence, exploitability, asset criticality, and business context.


• Develop executive dashboards, operational reports, and metrics for leadership review.


• Manage vulnerability exceptions and risk acceptance processes.


• Support audit, compliance, and regulatory requirements related to security vulnerabilities.


• Perform trend analysis and identify recurring security weaknesses.


• Integrate vulnerability management processes with SIEM, ITSM, CMDB, asset management, and threat intelligence platforms.


• Drive continuous improvement initiatives for vulnerability management programs.

Must Have Technical/Functional Skills

• Strong understanding of:


• CVSS Framework


• CIS Benchmarks


• NIST Cybersecurity Framework


• MITRE ATT&CK


• Common vulnerability exploitation techniques

Roles & Responsibilities

• Manage end-to-end Vulnerability Management lifecycle including discovery, assessment, prioritization, remediation tracking, and reporting.


• Perform vulnerability assessments across servers, endpoints, network devices, databases, cloud platforms, and applications.


• Analyze vulnerability scan results and recommend remediation strategies based on risk and business impact.


• Collaborate with infrastructure, application, cloud, and operations teams to drive remediation activities.


• Establish and monitor vulnerability remediation SLAs and compliance metrics.


• Conduct risk-based prioritization leveraging CVSS scores, threat intelligence, exploitability, asset criticality, and business context.


• Develop executive dashboards, operational reports, and metrics for leadership review.


• Manage vulnerability exceptions and risk acceptance processes.


• Support audit, compliance, and regulatory requirements related to security vulnerabilities.


• Perform trend analysis and identify recurring security weaknesses.


• Integrate vulnerability management processes with SIEM, ITSM, CMDB, asset management, and threat intelligence platforms.


• Drive continuous improvement initiatives for vulnerability management programs.

Generic Managerial Skills, If any

• Vulnerability assessment and remediation reports.


• Executive risk dashboards and metrics.


• SLA compliance tracking and remediation governance.


• Monthly and quarterly risk posture reviews.


• Continuous improvement recommendations for vulnerability management operations.

Nice-to-Have Skills

• Exposure Management


• Attack Surface Management (ASM)


• 5+ years of experience in Vulnerability Management, Cybersecurity Operations, or Security Engineering.


• Hands-on experience with tools such as:


• Tenable Security Center / Tenable.io


• Qualys VMDR


• Rapid7 InsightVM


• Microsoft Defender Vulnerability Management


• ServiceNow Vulnerability Response

TCS Employee Benefits Summary

• Discretionary Annual Incentive.


• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.


• Family Support: Maternal & Parental Leaves.


• Insurance Options: Auto & Home Insurance, Identity Theft Protection.


• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.


• Time Off: Vacation, Time Off, Sick Leave & Holidays.


• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.


• Salary Range: $110,000 - $150,000 a year

Qualifications

BACHELOR OF COMPUTER SCIENCE