Description :

Role : Vulnerability Management Analyst Work Level : Individual

Core : Result Driven, Organized, Problem Solving

Leadership : Responsive, Working Independently

Role :

Industry Type : Information Technology

Function : IT & Information Security - Other

Key Skills : Vulnerability, Vulnerability Assessment ,Linux ,Unix, Unix Scripting,Unix Shell Scripting, RBI Cybersecurity Framework,ISMS (ISO 27001),Rapid 7

Education Other : BTech

Note : This is a requirement for one of the Workassist Hiring Partner

Primary Responsibility :

Vulnerability Management is responsible for identifying, assessing, prioritizing, and tracking remediation of security vulnerabilities across operating systems, networks, middleware, endpoints, external perimeter, and containerized environments. The role requires hands-on experience with Rapid7 vulnerability management tools, system hardening, segmentation testing, and alignment with regulatory and compliance requirements

Vulnerability Assessment & Management

Conduct regular vulnerability scans on :

- Operating systems (Windows, Linux, Unix)

- Network devices (firewalls, routers, switches)

- Middleware and databases

- Endpoints and servers

- External / internet-facing assets

- Perform authenticated and unauthenticated scans and validate scan results.

- Execute external vulnerability assessments (VA) and exposure analysis.

- Support network segmentation penetration testing and validation.

- Hardening & Secure Configuration

- Review systems against CIS benchmarks and vendor hardening standards.

- Perform post-remediation validation scans.

- Validate secure configuration and patch compliance.

- Perform post-remediation validation scans.

- Coordinate with infrastructure, network, and application teams for vulnerability remediation.

- Container & Cloud Vulnerability Scanning

- Conduct container image and runtime vulnerability scanning.

- Identify vulnerabilities in Docker and Kubernetes environments.

- Support vulnerability assessment of cloud workloads (AWS / Azure / GCP).

Risk Analysis & Reporting :

- Analyze vulnerabilities using CVSS scoring, exploitability, and business impact.

- Prepare vulnerability reports, dashboards, and SLA tracking metrics.

- Track remediation status and escalate overdue or high-risk vulnerabilities.

Compliance & Audit Support :

Ensure vulnerability management aligns with :

- RBI Cybersecurity Framework

- ISO 27001

- PCI DSS

- NIST / CIS Controls

- Support internal and external audits by providing evidence, reports, and remediation status.

- Vulnerability Management Analyst

Experience : 3 - 6 Years

Location : Bangalore / Gurgaon / Remote (Client-dependent)

Industry : Information Technology / Cybersecurity

Education : B.Tech in Computer Science, IT, or a related technical field