About this role

Own lifecycle of vulnerabilities from detection through remediation and validation
Analyze vulnerability scan outputs and prioritize remediation
Ensure vulnerabilities are assigned and tracked to closure
Drive SLA adherence across severity levels
Coordinate remediation with InfraSec and asset owners
Maintain accurate CMDB and asset inventory (servers, cloud, application ownership)
Validate scan coverage against CMDB and identify gaps
Improve asset-to-owner mapping for accountability
Drive weekly/monthly remediation tracking cycles
Coordinate between application owners, infra teams, and security
Create and manage remediation tickets (ServiceNow/Jira)
Execute post-remediation rescans to validate closure
Produce dashboards: open vulnerabilities, SLA compliance, MTTR, aged findings
Identify opportunities to automate remediation workflows

3-5+ years experience in vulnerability management or infrastructure engineering
Experience with tools like Qualys,
Strong understanding of OS patching, cloud infrastructure, and application vulnerabilities
Experience with CMDB systems and ticketing tools (ServiceNow/Jira)
Knowledge of CVE, CVSS scoring and prioritization

Nice to Have

Associate Consultant – Technology Infrastructure Compliance

Key skills