Job Description

Key Responsibilities

Vulnerability Scanning & Detection

• Perform continuous vulnerability discovery and assessment using Tanium and Qualys across:

• Servers (Windows/Linux)

• Endpoints

• Network devices

• Cloud workloads (AWS/Azure/GCP, if applicable)

• Configure and manage authenticated and unauthenticated scans.

• Ensure proper scan coverage, agent health, and asset visibility.

Vulnerability Analysis & Risk Assessment

• Analyze scan results to:

• Validate true positives and eliminate false positives

• Identify exploitability and business impact

• Perform risk-based prioritization using:

• CVSS scores

• Asset criticality

• Threat intelligence (KEV, exploit availability)

Remediation & Lifecycle Management

• Collaborate with infrastructure, cloud, and application teams to:

• Recommend remediation actions

• Validate patching and configuration fixes

• Track vulnerabilities through the full lifecycle:

• Open → In Progress → Mitigated → Closed

• Perform rescan and verification post-remediation.

Reporting & Metrics

• Generate weekly, monthly, and executive-level reports including:

• Vulnerability trends

• SLA compliance

• Risk posture by severity

• Maintain dashboards and KPIs for leadership and stakeholders.

͏

͏

͏

͏