Infrastructure Vulnerability Management

Profile: Technical Lead (Infrastructure Vulnerability Management)

Location: No location constraints (but preference to Pune/Mumbai)

Band: B3

Experience: 6 8 years

Responsibilities

• Conducting regular and comprehensive vulnerability assessments of networks, systems, and applications using the VA tools (e.g., Qualys, Saner, Tenable, Rapid7, etc.)

• Prioritize remediation of discovered vulnerabilities and coordinate mitigation efforts across all teams and systems.

• Collaborate with team members and help operationalize defined vulnerability management processes.

• Coordinate with respective teams to ensure timely update and configuration of software and operating systems with the latest patches and security settings to ensure the proper defences are present.

• Contribute to defining, reviewing, and enacting security policies and practices.

• Stay apprised of the threat landscape, vulnerabilities, and industry best practices, and make recommendations to improve Wipro's security posture.

• Review and create SOPs & technical documents/runbooks to support team processes and ISMS requirements.

• Work closely with other information security teams to ensure operational efficiency and stay apprised of overall Wipro security posture and capabilities.

Requirements

• Bachelor's degree in information security, Information Technology, or a related field.

• 6-8 years of experience in Threat and Vulnerability Management or equivalent knowledge.

• Proficiency in using the VA tools (e.g., Qualys, Saner, Tenable, Rapid7, etc.) for vulnerability assessments.

• Hands-on experience with reports and representation with various dashboards.

• Good understanding of CIS benchmarks and policies.

• Knowledge of CVSS scoring, exploitability, patching, and configuration risks.

• Exposure to enterprise audit and compliance requirements

• Familiarity with the ServiceNow tool will be advantageous.

• Must be a team player, dedicated, and proactive.

• Must possess good communication, problem-solving, critical thinking, and organizational skills.

• Must have good presentation skills.

• Ability to clearly present technical approaches or findings in oral and written format.

• Ability to present ideas in business-friendly and user-friendly language.

• Experience working in large enterprise or regulated environments.

• Relevant certifications (preferred):

• CISSP, CISM, CEH, CompTIA Security+

• Vendor specific VA tool certifications