Key Responsibilities
- Assess vulnerabilities and prioritise remediation based on risk, severity, exploitability, asset criticality and operational impact.
- Coordinate with business, application, infrastructure and system teams on remediation plans, patch schedules and approved maintenance windows.
- Support patch deployment and validation across servers, applications, network devices, databases, cloud platforms and related systems.
- Validate patch stability, effectiveness and compatibility after implementation.
- Conduct periodic vulnerability scans across air-gapped systems, OT environments, cloud services and other in-scope assets.
- Support asset visibility and vulnerability scan coverage across relevant environments.
- Track KPIs/KRIs, vulnerability exposure, patch compliance, remediation progress and SLA adherence.
- Prepare dashboards, technical reports and management updates for the security council, senior management and relevant stakeholders.
- Prepare and review documentation for Change Requests, deviations, risk acceptances, remediation evidence, security reviews, risk assessments and audits.
- Facilitate remediation meetings with system owners and stakeholders, track action items, follow up on SLA breaches and escalate risks where required.
- Provide weekend or after-hours support for emergency patches, critical deployments or approved maintenance windows when required.
- Support process improvement through automation of reporting, patching, tracking and workflow activities.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, or related field.
- 5+ years experience in IT, OT, or network administration.
- Understanding of the vulnerability management lifecycle, patch management, CIS Benchmarks, ISO 27001, risk assessment and network security.
- Troubleshooting skills for patching, firmware upgrades, configuration changes and implementation issues.
- Ability to translate technical vulnerabilities into business risk, remediation priority and management-level updates.
Technical Specialisations
Candidates are expected to have experience in one or more ofthe following areas. Experience across multiple areas will be advantageous:
- Operating Systems & Virtualisation: Linux, Red Hat, Windows, VMware vCenter, ESXi and Kubernetes.
- Database Platforms: Microsoft SQL Server, Oracle and PostgreSQL.
- SAP Systems: SAP Kernel, Process Orchestration, support packages and SAP Notes.
- Application Stacks: Java, .NET, Apache, nginx, IIS and WebLogic.
- Network Systems: Routers, switches, firewalls, load balancers, ACI, Cisco, Arista, F5, Check Point, Palo Alto and network flow analysis.
- Vulnerability Management & Analytics: Vulnerability management platforms, dashboards, reporting, Microsoft Excel, Power BI, Microsoft Copilot or equivalent analytics tools.
- Automation & Scripting: PowerShell, Python, shell scripting, API integration and workflow automation.
Advantageous Experience
- Practical use of AI tools to summarise vulnerability data, generate reports, improve dashboards or identify remediation trends.
- Awareness of AI-related security risks and responsible use of enterprise AI tools.
- Experience supporting vulnerability remediation governance, deviation tracking, audit preparation or security council reporting.
Navneet Goel |EA License No. : 02C3423 | Reg No. R1982194
