Workstreet

2 weeks ago

Vulnerability Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Join a delivery-focused security team that owns vulnerability remediation from scan to fix. Configure and maintain vulnerability scanning infrastructure across client environments, then analyze findings using CVSS/EPSS and threat intelligence to prioritize what matters most. Work hand-in-hand with client IT and DevOps teams to deploy patches in AWS, Azure, and GCP, document exceptions for compliance evidence, and act as the trusted security advisor for a portfolio of startups.

Location: India

Workplace: Remote

Employment Type: Full time

Job Function: Data Analytics & Business Intelligence

Key Responsibilities

•Orchestrate vulnerability scanning infrastructure by configuring policies, authenticated credentials, scan schedules, and asset groups across client and cloud-native environments.
•Execute threat analysis and risk prioritization by evaluating scan outputs, filtering false positives, and applying CVSS/EPSS-based prioritization with threat intelligence and asset context.
•Drive collaborative remediation by translating vulnerabilities into actionable patch-management workflows and working directly with client IT and software engineers to remediate quickly.
•Manage exceptions and audit compliance by documenting and tracking vulnerability exceptions/risk acceptances and mapping patching evidence to regulatory audit requirements.
•Serve as the primary advisory point of contact for an assigned client portfolio, providing milestones, technical escalations, and clear executive status reporting.

Travel: Low travel

Pay and Benefits

Perks:Remote Work

Key Requirements

•Hands-on configuration and operational experience with vulnerability management platforms such as Tenable/Nessus, Qualys, Rapid7 InsightVM, or Vanta.
•Strong understanding of vulnerability scoring and risk prioritization systems, including CVSS and EPSS.
•Ability to interpret raw scan outputs, filter false positives, and translate technical findings into business-relevant risk language.
•Foundational familiarity with vulnerability classes and exposures across cloud, OS, application, and network infrastructure layers.
•Working knowledge of security compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA, or CMMC) and how scanning maps to audit evidence.

Experience:CloudSecurityManaged security servicesConsulting

Skills:Client-centricConsultative communicationRisk-based decision makingTechnical advisoryCross-functional collaboration

Certifications:CompTIA Security+CEHTenable Certified Security AssociateGIAC GEVA

Languages:English

Tech Stack:VantaTenableNessusQualysRapid7 InsightVMCVSSEPSSAWSAzureGCPCVSS base scoresGlobal threat intelligence feedsSOC 2ISO 27001HIPAACMMCNIST 800-171NIST 800-53FedRAMPCVE

Company Brief

Workstreet

Operates an online recruitment platform connecting employers with job seekers, offering job listings, candidate sourcing tools, and employer branding solutions to streamline hiring and talent acquisition processes for small to medium-sized businesses.

Industry: HR Tech

Website

Loading job details...

Preparing the role view and application actions.

Workstreet

2 weeks ago

Vulnerability Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: India

Workplace: Remote

Employment Type: Full time

Job Function: Data Analytics & Business Intelligence

Key Responsibilities

•Orchestrate vulnerability scanning infrastructure by configuring policies, authenticated credentials, scan schedules, and asset groups across client and cloud-native environments.
•Execute threat analysis and risk prioritization by evaluating scan outputs, filtering false positives, and applying CVSS/EPSS-based prioritization with threat intelligence and asset context.
•Drive collaborative remediation by translating vulnerabilities into actionable patch-management workflows and working directly with client IT and software engineers to remediate quickly.
•Manage exceptions and audit compliance by documenting and tracking vulnerability exceptions/risk acceptances and mapping patching evidence to regulatory audit requirements.
•Serve as the primary advisory point of contact for an assigned client portfolio, providing milestones, technical escalations, and clear executive status reporting.

Travel: Low travel

Pay and Benefits

Perks:Remote Work

Key Requirements

•Hands-on configuration and operational experience with vulnerability management platforms such as Tenable/Nessus, Qualys, Rapid7 InsightVM, or Vanta.
•Strong understanding of vulnerability scoring and risk prioritization systems, including CVSS and EPSS.
•Ability to interpret raw scan outputs, filter false positives, and translate technical findings into business-relevant risk language.
•Foundational familiarity with vulnerability classes and exposures across cloud, OS, application, and network infrastructure layers.
•Working knowledge of security compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA, or CMMC) and how scanning maps to audit evidence.

Experience:CloudSecurityManaged security servicesConsulting

Skills:Client-centricConsultative communicationRisk-based decision makingTechnical advisoryCross-functional collaboration

Certifications:CompTIA Security+CEHTenable Certified Security AssociateGIAC GEVA

Languages:English

Tech Stack:VantaTenableNessusQualysRapid7 InsightVMCVSSEPSSAWSAzureGCPCVSS base scoresGlobal threat intelligence feedsSOC 2ISO 27001HIPAACMMCNIST 800-171NIST 800-53FedRAMPCVE

Company Brief

Workstreet

Industry: HR Tech

Website