Vulnerability Management Engineer

Accountabilities: Validate vulnerability scan schedules and confirm that scans run as planned across assigned networks, subnets, and geographic regions. Monitor scanner health, assignments, configurations, and scan failures, investigating issues involving offline scanners, authentication, access permissions, and network connectivity. Create, update, and follow up on incident and remediation tickets related to scanner failures, scanning issues, and vulnerability resolution. Support approved ad hoc rescans for eligible assets, verify hostnames and IP addresses, review vulnerability details, and confirm whether remediation has successfully resolved reported findings. Maintain accurate remediation records by attaching scan results, CSV reports, supporting evidence, and clear validation notes to relevant tickets. Monitor vulnerability dashboards and generate reports using tools such as ArmorCode and CrowdStrike to track findings, remediation statistics, service-level agreements (SLAs), and evidence requirements. Review vulnerability exception requests by validating affected assets, business justifications, supporting evidence, asset and risk owners, exception categories, and approval status. Assist with creating and maintaining approved vulnerability exceptions in designated platforms after all required approvals have been obtained. Support vulnerability advisories by validating Common Vulnerabilities and Exposures (CVE) information, affected assets, impacted software versions, and remediation follow-up with asset owners. Review requests to reassign vulnerability findings, validate ownership evidence, prepare documentation templates, and coordinate reviews with internal stakeholders. Assist with External Attack Surface Management (EASM) activities by identifying asset ownership, mapping responsible teams, and coordinating remediation efforts. Prioritize immediate follow-up on critical vulnerabilities that could affect external security ratings, risk indicators, or the organization’s security posture. Gradually support additional security engineering activities under guidance, including security configuration assessments, asset onboarding validation, approved security template reviews, and troubleshooting of security tooling. Contribute to process improvement and automation initiatives while following established security procedures and escalation guidelines. Requirements Basic understanding of cybersecurity fundamentals, including vulnerabilities, risk ratings, CVEs, remediation processes, and security patching. Foundational knowledge of networking concepts, including IP addresses, subnets, ports, protocols, and network connectivity. Basic familiarity with Windows and Linux operating systems, network devices, databases, and cloud or virtualized environments. Ability to work with security dashboards, reports, CSV exports, ticketing systems, and documented operational procedures. Strong attention to detail when validating asset information, vulnerability findings, scan results, remediation evidence, and exception requests. Good written communication skills, with the ability to document findings clearly, update tickets accurately, and follow up effectively with stakeholders. Willingness to learn enterprise vulnerability management platforms, IT service management tools, configuration management database (CMDB) processes, and security operations workflows. A proactive and accountable approach to assigned tasks, with the ability to follow issues through to resolution and escalate blockers when necessary. Ability to collaborate effectively with internal teams, asset owners, and requestors while maintaining professional communication and accurate records. Strong organizational skills, disciplined time management, and the ability to work independently in a remote environment while providing regular progress updates. Curiosity, adaptability, and motivation to develop broader cybersecurity and security engineering capabilities. Preferred qualification: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related field. Preferred certifications or training: CompTIA Security+, CompTIA Network+, Certified in Cybersecurity (CC), or equivalent foundational cybersecurity learning. Certifications are beneficial but not mandatory. Benefits Employment type: Full-time position. Location: Bangalore, India, with a remote work arrangement. Professional development: Opportunity to gain practical experience in vulnerability management, remediation validation, security monitoring, and enterprise cybersecurity workflows. Technical exposure: Hands-on experience with security platforms and tools, including ArmorCode, CrowdStrike, vulnerability scanners, dashboards, and ticketing systems. Career progression: Potential to expand into security engineering responsibilities as technical expertise and operational maturity develop. Continuous learning: Opportunity to build knowledge of cybersecurity standards, vulnerability assessment, asset management, and security automation. Collaborative environment: Work with technical teams and asset owners to address security risks and improve operational processes. Flexibility: Remote working environment requiring effective time management, regular communication, and collaboration with internal stakeholders. Salary and additional benefits: Compensation, healthcare coverage, paid leave, bonuses, and other employment benefits were not specified in the available job description.