Job Summary:

Vulnerability remediation and scripting are needed as primary skills. We have openings for BOFA for Chennai, Mumbai, and Hyderabad based candidates only. The experience required is 2-4 years. We are seeking a skilled Vulnerability Management Engineer with strong expertise in scripting, GitHub workflows, and modern AI-assisted tools such as GitHub Copilot. The role involves identifying, assessing, and mitigating security vulnerabilities across applications and infrastructure while leveraging automation and secure coding practices.

Key Responsibilities:

- Perform vulnerability assessments and security scans across applications, systems, and repositories.

- Analyze and prioritize vulnerabilities based on severity, risk, and business impact.

- Develop and maintain scripts (Python, PowerShell, Bash, etc.) for automation of security tasks.

- Integrate vulnerability scanning tools with GitHub repositories and CI/CD pipelines.

- Utilize GitHub and GitHub Copilot to enhance secure code development and remediation workflows.

- Collaborate with development and DevOps teams to fix vulnerabilities and enforce secure coding practices.

- Monitor and manage vulnerability lifecycle from identification to closure.

- Conduct code reviews with a focus on security best practices.

- Generate reports and dashboards for vulnerability tracking and compliance.

Required Skills & Qualifications:

- Strong experience in Vulnerability Management and Application Security.

- Proficiency in scripting languages (Python, Bash, PowerShell, or similar) and Ansible (Python or Ansible).

- Hands-on experience with GitHub, including repositories, branching strategies, and GitHub Actions.

- Familiarity with GitHub Copilot or similar AI-assisted coding tools.

- Knowledge of common vulnerabilities (OWASP Top 10, CVEs, etc.).

- Experience with tools like Qualys, Nessus, Snyk, or similar.

- Understanding of CI/CD pipelines and DevSecOps practices.

Core Skill Keywords to concentrate:

- Vulnerability Management

- VAPT / VA / Pentesting

- Application Security (AppSec)

- SAST / DAST / SCA

Tools:

- Qualys, Nessus, Rapid7, Tenable

- Snyk, Checkmarx, Veracode

Automation / Dev Skills:

- Python / Bash / PowerShell

- GitHub / GitHub Actions