Senior Associate, Cyber/IT Security, Infra VAPT, Technology and Operations

As a Vulnerability Management Specialist at Technology and Operations (T&O) in the bank, your role involves identifying, assessing, prioritizing, and tracking remediation of security vulnerabilities across various environments. You will need hands-on experience with Rapid7 vulnerability management tools, system hardening, segmentation testing, and compliance alignment.

**Key Responsibilities:**

• Conduct regular vulnerability scans on operating systems (Windows, Linux, Unix), network devices (firewalls, routers, switches), middleware, databases, endpoints, servers, and external/internet-facing assets.
• Perform authenticated and unauthenticated scans, execute external vulnerability assessments, and support network segmentation penetration testing.
• Review systems against CIS benchmarks, validate secure configuration and patch compliance, and coordinate with teams for vulnerability remediation.
• Conduct container image and runtime vulnerability scanning, identify vulnerabilities in Docker and Kubernetes environments, and support cloud workload vulnerability assessments.
• Analyze vulnerabilities using CVSS scoring, prepare vulnerability reports, track remediation status, and ensure compliance with regulatory frameworks.

**Qualifications Required:**

• Minimum 5-7 years of experience in Vulnerability Management / Cyber Security Operations.
• Experience in enterprise or BFSI environments is preferred.
• Familiarity with regulatory and audit requirements.
• Certifications like CEH, Security, CISSP (or pursuing) are preferred but not mandatory.
• Education: Graduation in BE IT/Computers/Electronics, B.Sc - Computers, M.Sc - Computers. Post-Graduation in PGDIT, MCA, MBA.

In this role, you will play a crucial part in ensuring the bank's infrastructure remains secure and resilient against potential vulnerabilities. Your expertise in vulnerability scanning, patch management, system hardening, and compliance alignment will be instrumental in maintaining a robust security posture. As a Vulnerability Management Specialist at Technology and Operations (T&O) in the bank, your role involves identifying, assessing, prioritizing, and tracking remediation of security vulnerabilities across various environments. You will need hands-on experience with Rapid7 vulnerability management tools, system hardening, segmentation testing, and compliance alignment.

**Key Responsibilities:**

• Conduct regular vulnerability scans on operating systems (Windows, Linux, Unix), network devices (firewalls, routers, switches), middleware, databases, endpoints, servers, and external/internet-facing assets.
• Perform authenticated and unauthenticated scans, execute external vulnerability assessments, and support network segmentation penetration testing.
• Review systems against CIS benchmarks, validate secure configuration and patch compliance, and coordinate with teams for vulnerability remediation.
• Conduct container image and runtime vulnerability scanning, identify vulnerabilities in Docker and Kubernetes environments, and support cloud workload vulnerability assessments.
• Analyze vulnerabilities using CVSS scoring, prepare vulnerability reports, track remediation status, and ensure compliance with regulatory frameworks.

**Qualifications Required:**

• Minimum 5-7 years of experience in Vulnerability Management / Cyber Security Operations.
• Experience in enterprise or BFSI environments is preferred.
• Familiarity with regulatory and audit requirements.
• Certifications like CEH, Security, CISSP (or pursuing) are preferred but not mandatory.
• Education: Graduation in BE IT/Computers/Electronics, B.Sc - Computers, M.Sc - Computers. Post-Graduation in PGDIT, MCA, MBA.

In this role, you will play a crucial part in ensuring the bank's infrastructure remains secure and resilient against potential vulnerabilities. Your expertise in vulnerability scanning, patch management, system hardening, and compliance alignment will be instrumental in maintaining a robust security posture.