Vulnerability Management Engineer I

This is a fully remote position, open to applicants in India.

📋 Description

• Validate schedules for vulnerability scans across designated networks, subnets, and regions.

• Monitor the health of scanner appliances, including their assignments, configurations, failures, authentication, access, and connectivity issues.

• Create, update, and track incident and remediation tickets.

• Assist with authorized ad hoc rescans and confirm asset, vulnerability, and remediation details.

• Update remediation tickets with scan results, CSV reports, evidence, and validation notes.

• Oversee vulnerability dashboards and generate reports from ArmorCode and CrowdStrike.

• Assess exception requests and verify impacted assets, justification, evidence, ownership, categories, and approvals.

• Establish and maintain approved exceptions within vulnerability management platforms.

• Validate vulnerability advisories, affected assets, impacted versions, and follow-up on remediation.

• Review requests for finding reassignments and facilitate reassignment evaluations.

• Support External Attack Surface Management findings, asset ownership, remediation, and owner mapping.

• Follow up on critical vulnerabilities that may impact external security ratings or business risk indicators.

• Continuously assist with security configuration assessments, asset onboarding validation, security templates, tooling issues, process enhancements, and automation under guidance.

⛳️ Requirements

• Basic understanding of cybersecurity concepts, including vulnerabilities, risk ratings, CVEs, remediation, and patching.

• Foundational knowledge of IP addresses, subnets, ports, protocols, and network connectivity.

• Basic familiarity with Windows, Linux, network devices, databases, and cloud or virtualized environments.

• Ability to work with dashboards, reports, CSV exports, tickets, and documented operational procedures.

• Strong written communication skills for updating tickets, following up with stakeholders, and documenting evidence.

• Attention to detail when verifying asset information, vulnerability specifics, scan results, and exception evidence.

• Willingness to learn about vulnerability management platforms, IT service management tools, CMDB processes, and enterprise security workflows.

• A bachelor’s degree in computer science, information technology, cybersecurity, electronics, or a related field is preferred but not mandatory.

• Training or certifications in cybersecurity fundamentals, such as Security+, CC, Network+, or equivalent learning exposure, are preferred but not mandatory.

• Ability to work efficiently in a remote setting with regular updates, collaboration, and disciplined time management.

🏝️ Benefits

• Remote work arrangement.

• Opportunity to advance into broader security engineering responsibilities.

• Support for cybersecurity fundamentals training or certifications through learning exposure.