# VM Engineer- security operation

**Company**: Davies
**Location**: Viman Nagar, Maharashtra
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://davies.pinpointhq.com/en/postings/b1a657a6-f2d5-471c-915f-59d32d270819?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_44e817b0-98f

## Description

We are seeking a Sr Associate – Secops / Vulnerability Detection and Remediation SME to lead our organisation's efforts in identifying, assessing, and remediating vulnerabilities across IT infrastructure, applications, and cloud environments.

## Key Responsibilities

- Lead the enterprise-wide vulnerability management program, including detection, prioritisation, and remediation.

- Conduct regular vulnerability scans using tools like Qualys, Tenable Nessus, Rapid7, and analyse results to identify risks.

- Collaborate with IT, DevOps, and application teams to ensure timely patching and remediation of vulnerabilities.

- Develop and maintain vulnerability management policies, procedures, and playbooks.

- Provide SME-level guidance on scanning signatures, detection capabilities, and remediation strategies.

- Monitor threat intelligence feeds and correlate with internal vulnerability data to assess risk.

- Host remediation meetings with stakeholders and track progress of corrective actions.

- Ensure compliance with industry standards such as NIST, ISO 27001, PCI-DSS, HIPAA.

- Generate detailed reports and dashboards for leadership on vulnerability trends and remediation status.

- Support incident response teams with vulnerability exploitation insights and mitigation strategies.

- Continuously improve scanning, reporting, and remediation processes through automation and orchestration tools (e.g., Service Now, MS Sentinel, Ansible, Terraform, Splunk Phantom).

## Experience & Education

- Bachelor’s degree in computer science, Information Security, or related field.

- 5+ years of experience in vulnerability management or cybersecurity.

- Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.

- Hands-on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).

- Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc…).

- Excellent analytical, communication, and problem-solving skills.

## Skills, Knowledge & Expertise

- Experience with threat modeling techniques (e.g., STRIDE, DREAD).

- Knowledge of forensic tools and incident response procedures.

- Experience in scripting (e.g., Python, PowerShell) for automation.

- Familiarity with SIEM platforms (e.g., Splunk, Sentinel, QRadar).

- Strong knowledge of operating systems (Windows, Linux), network protocols, and cloud platforms.

- Hands-on experience with vulnerability management platforms (e.g., Qualys VMDR, Tenable.io, Rapid7 InsightVM).

- Familiarity with patch management tools (e.g., Intune, Qualys, PatchmyPC, Automox WSUS, etc…).

## Skills

### Required
- Qualys
- Tenable Nessus
- Rapid7
- Python
- PowerShell
- Splunk
- Service Now
- MS Sentinel
- Ansible
- Terraform
- Splunk Phantom
- Intune
- PatchmyPC
- Automox WSUS
- STRIDE
- DREAD
- SIEM

---

Source: [Apply at davies.pinpointhq.com](https://davies.pinpointhq.com/en/postings/b1a657a6-f2d5-471c-915f-59d32d270819?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)