Job Summary
Business unit: VULNERABILITY MANAGEMENT Domain: Tools Sub-domain: Qualys
Key Responsibilities
Business unit: VULNERABILITY MANAGEMENT Domain: Tools Sub-domain: Qualys
Skill Requirements
Business unit: VULNERABILITY MANAGEMENT Domain: Tools Sub-domain: Qualys
Other Requirements
Business unit: VULNERABILITY MANAGEMENT Domain: Tools Sub-domain: Qualys
Vulnerability Remediation Tracking Specialist- JD \\\\r\\\\nMust have Requirements: \\\\r\\\\nWell versed with development of vulnerability management tool architecture, deployment, and configuration of vulnerability tools like Qualys. \\\\r\\\\nExtensive experience in ServiceNow VR module \\\\r\\\\nExtensive experience in Qualys modules like VM, PC, WAS, Cloud Agent, Container Security etc. \\\\r\\\\nKnowledge in integration of Qualys with ServiceNow ITSM and CMDB \\\\r\\\\nAble to identify and suggest vulnerability management tool related architectural best practices \\\\r\\\\nWorking experience on configuring the vulnerability management tool including scanners, cloud agents, scanning profiles, policy compliance templates, scanning schedules etc. \\\\r\\\\nAnalyze, Interpret, and prioritize vulnerability scan results into remediation actions. \\\\r\\\\nExperience in working and removing false positive vulnerabilities \\\\r\\\\nExtensive experience in handling end to end vulnerability remediation tracking process, which includes coordination with different stakeholders, Attending CAB meetings, taking updates on status of remediation \\\\r\\\\nCoordination with relevant stakeholders until closure of zero-day vulnerabilities \\\\r\\\\nWell versed with exception management process; coordinate with business stakeholders to mark vulnerabilities as exception which cannot be remediated due to business reasons. \\\\r\\\\nCreation and deployment of vulnerability management related process \\\\r\\\\nReview process definition and technical operational runbooks \\\\r\\\\nProviding and presenting vulnerability remediation tracking status updated to management in form of dashboards. \\\\r\\\\nMust be ready to work in 24*7 environment \\\\r\\\\nShould have Requirements: \\\\r\\\\nShould have experience in reduction of the backlog vulnerabilities. \\\\r\\\\nGood understanding of information security related fields, including security implementation, security operations, and security policy and technology administration \\\\r\\\\nShould possess good understanding of assets, threats and vulnerabilities and their correlation in an organization \\\\r\\\\nShould be able to collect feedback and analyze weak areas and present the same to management \\\\r\\\\nShould be able to collect gaps in vulnerability management processes and provide optimization recommendations to customer \\\\r\\\\nGood to Have Requirements: \\\\r\\\\nExperience on vulnerability prioritization platforms like RiskSense, Kenna, Lumin, VMDR would be a plus \\\\r\\\\nExperience on tools like StealthAudit \\\\r\\\\nHands on experience in vulnerability patching for Wintel/Linux etc. \\\\r\\\\nHand on experience in tools like SCCM/ BigFix etc. \\\\r\\\\n \\\\r\\\\n \\\\r\\\\nQualification: Candidate should be graduate preferably B. E/ B. Tech/ M. Tech/ MCA \\\\r\\\\nCertification: \\\\r\\\\nQualys Certified Specialist for VM, PC, WAS is must \\\\r\\\\nCertifications like CCNA, CISA, IS0 27001, or CEH \\\\r\\\\n \\\\r\\\\nExperience: Candidate should have overall experience of 8+ years on Vulnerability Management \\\\r\\\\n \\\\r\\\\nSoft Skills: \\\\r\\\\nExcellent communication and customer handling skills \\\\r\\\\nMust be from global support/ practice background \\\\r\\\\nMotivated to complete tasks and projects \\\\r\\\\nStrong MS Office, documentation, communication, and presentation skills