Job Description

Profile: Technical Lead (Infrastructure Vulnerability Management)
Location: No location constraints (but preference to Pune/Mumbai)
Band: B3
Experience: 6–8 years
About the role:

We are looking to onboard a Technical Lead with experience in Infrastructure Vulnerability Management.

R͏oles & Responsibilities

•    Conducting regular and comprehensive vulnerability assessments of networks, systems, and applications using the VA tools (e.g., Qualys, Saner, Tenable, Rapid7, etc.)
•    Prioritize remediation of discovered vulnerabilities and coordinate mitigation efforts across all teams and systems.
•    Collaborate with team members and help operationalize defined vulnerability management processes.
•    Coordinate with respective teams to ensure timely update and configuration of software and operating systems with the latest patches and security settings to ensure the proper defences are present.
•    Contribute to defining, reviewing, and enacting security policies and practices.
•    Stay apprised of the threat landscape, vulnerabilities, and industry best practices, and make recommendations to improve Wipro’s security posture.
•    Review and create SOPs & technical documents/runbooks to support team processes and ISMS requirements.
•    Work closely with other information security teams to ensure operational efficiency and stay apprised of overall Wipro security posture and capabilities.

Q͏ualifications

•    Bachelor’s degree in information security, Information Technology, or a related field.
•    6-8 years of experience in Threat and Vulnerability Management or equivalent knowledge.
•    Proficiency in using the VA tools (e.g., Qualys, Saner, Tenable, Rapid7, etc.) for vulnerability assessments.
•    Hands-on experience with reports and representation with various dashboards.
•    Good understanding of CIS benchmarks and policies.
•    Knowledge of CVSS scoring, exploitability, patching, and configuration risks.
•    Exposure to enterprise audit and compliance requirements
•    Familiarity with the ServiceNow tool will be advantageous. 
•    Must be a team player, dedicated, and proactive.
•    Must possess good communication, problem-solving, critical thinking, and organizational skills.
•    Must have good presentation skills.
•    Ability to clearly present technical approaches or findings in oral and written format.
•    Ability to present ideas in business-friendly and user-friendly language.
•    Experience working in large enterprise or regulated environments.

Relevant certifications (preferred): 
o    CISSP, CISM, CEH, CompTIA Security+
o    Vendor specific VA tool certifications