GenpactEmployer profile
Consultant – Vulnerability Management Engineer-ITO069344
Location not specified · Experience not specified
Experience- Experience not specified
Salary- Not disclosed
Location- Location not specified
- Work mode
- Not specified
- Job type
- Full-time
Apply by- Closing date not listed
- Posted
- 14 May 34
About this role
With a startup spirit and 115,000 + curious and courageous minds, we have the expertise to go deep with the world’s biggest brands—and we have fun doing it! We dream in digital, dare in reality, and reinvent the ways companies work to make an impact far bigger than just our bottom line. We’re harnessing the power of technology and humanity to create meaningful transformation that moves us forward in our pursuit of a world that works better for people.Now, we’re calling upon the thinkers and doers, those with a natural curiosity and a hunger to keep learning, keep growing. People who thrive on fearlessly experimenting, seizing opportunities, and pushing boundaries to turn our vision into reality. And as you help us create a better world, we will help you build your own intellectual firepower.
Welcome to the relentless pursuit of better.
Inviting applications for the role of Consultant – Vulnerability Management Engineer
The Information Security Operations Vulnerability Analyst position required with responsibility of reviewing, recommending and assisting in the implementation of technical security program controls including standards, key processes, and best practices. This role will analyze enterprises business applications, computing, and the information security environment, make recommendations and drive the implementation of security strategies.
Roles & Responsibilities
As a Vulnerability Management Engineer, your main responsibility is to identify, assess, and mitigate security vulnerabilities within an organization's information technology infrastructure. Your role is crucial in maintaining a secure environment by proactively addressing potential weaknesses before they are exploited by attackers. The specific job description for a Vulnerability Management Engineer may include the following:
- Vulnerability Scanning: Conducting regular vulnerability scans using automated scanning tools to identify weaknesses in the organization's networks, systems, applications, and cloud environments.
- Vulnerability Assessment: Analyzing the results of vulnerability scans to assess the severity and potential impact of identified vulnerabilities.
- Risk Prioritization: Collaborating with cross-functional teams, such as IT operations, system administrators, and application owners, to prioritize and classify vulnerabilities based on risk levels and criticality.
- Remediation Planning: Developing and recommending remediation strategies and actions to address identified vulnerabilities. This may involve applying patches, configuration changes, or implementing compensating controls.
- Patch Management: Working with system administrators and application owners to ensure the timely application of security patches to mitigate known vulnerabilities.
- Vulnerability Reporting: Preparing comprehensive reports and documentation to communicate the status of vulnerabilities, risk posture, and progress of remediation efforts to management and relevant stakeholders.
- Vulnerability Trend Analysis: Identifying recurring vulnerability patterns and trends to understand the root causes and address systemic issues in the organization's security posture.
- Security Best Practices: Staying up-to-date with the latest security trends, industry best practices, and emerging threats to continuously improve vulnerability management processes.
- Vulnerability Coordination: Coordinating with external vendors, security researchers, or bug bounty programs when external vulnerabilities affecting the organization's assets are discovered.
- Vulnerability Management Tools: Managing and maintaining vulnerability management tools and platforms, ensuring they are properly configured and optimized for accurate and efficient scanning.
- Compliance and Auditing: Ensuring that vulnerability management practices align with industry standards, regulations, and internal security policies. Preparing for and participating in security audits and assessments.
- Security Awareness and Training: Conducting training and awareness programs for employees and stakeholders to educate them about the importance of vulnerability management and their role in the process.
Minimum Qualifications / Skills
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Vulnerability Assessor (CVA).
- Proficiency in vulnerability scanning tools like Nessus, Qualys, or Rapid7 Nexpose.
- Understanding of common vulnerabilities and exposure (CVE) databases and vulnerability scoring systems (CVSS).
- Strong analytical and problem-solving skills to assess and prioritize vulnerabilities effectively.
- Knowledge of network and system architecture, as well as common security technologies and protocols.
- Familiarity with security standards and frameworks (e.g., ISO 27001, NIST Cybersecurity Framework).
- Excellent communication and interpersonal skills to collaborate with diverse teams and stakeholders.
- Attention to detail and ability to work in a fast-paced environment with tight deadlines.
Furthermore, please do note that Genpact does not charge fees to process job applications and applicants are not required to pay to participate in our hiring process in any other way. Examples of such scams include purchasing a 'starter kit,' paying to apply, or purchasing equipment or training.
Job
Consultant
Primary Location
India-Hyderabad
Schedule
Full-time
Education Level
Bachelor's / Graduation / Equivalent
Job Posting
Nov 6, 2023, 5:00:43 AM
Unposting Date
Ongoing
Master Skills List
Consulting
Job Category
Full Time