Technical Lead, Vulnerability Management

Why we need this role

We are seeking a dynamic and motivated Vulnerability Management Lead to join our rapidly growing program. The ideal candidate will blend cybersecurity expertise with technical analytical skills to support diverse operational needs. The Vulnerability Management Lead will play a crucial role in tracking and managing the identification, assessment, and remediation of security vulnerabilities across the organization’s infrastructure and monitoring and reporting on vulnerability and other security compliance status. The role requires collaboration with various partners to ensure that vulnerability assessments and emerging threats are prioritized and advanced. Additionally, the successful candidate will work with management to continuously evolve the vulnerability management program. 

What you will do

• The development and implementation of the Colt Vulnerability Management Framework.
• Enhancing the scope and efficiency of current vulnerability scanning and management tools and integration between them.
• Design and manage the periodic penetration testing exercise.
• Collaborating with identified stakeholders to provide specialist guidance and support, ensuring effective vulnerability identification, prioritisation and remediation activity definition.
• Perform Vulnerability scans using Vulnerability Management tool
• Responsible for working with leading team to assist with understanding threat data and vulnerabilities found on client’s network
• Prepare and send error free Vulnerability Management reports to respective stakeholders
• Send scan notification and completion emails as per defined timelines.
• Configuration of vulnerability scans and reporting
• Troubleshooting in case of scan failures or tool-based issues
• Identify false positive and connect with vendor and support teams to resolve it
• Drive remediation connects with multiple stake holders / resolver groups

What we're looking for

• Self-driven individual with vulnerability management function experience.
• Proven experience with products dealing with vulnerability management services which include - Rapid7, Qualys, Nessus etc.
• Strong understanding on Windows systems, Linux systems
• Strong understanding on Networking
• Should have completed certifications like CEH, ECSA or other equivalent security certifications
• Degree in Information Technology, Engineering or similar
• In-depth knowledge of and experience in security concepts such as cyberattacks and techniques, risk management, incident management, threat management, etc.
• Depth insight on all latest vulnerabilities and highlight the risk to client environment
• Proficient in preparation of reports, dashboards and documentations.
• Knowledge /Experience of security technologies such as Cisco/Juniper Firewalls, Application Firewalls, IPS, SIEM, Proxy, NAC, etc.