Security Engineer II - Vulnerability Management

Overview

Security Engineer II supporting vulnerability management. You will operate vulnerability management processes, improve detection and scanning accuracy, and coordinate remediation and compliance reporting.

What you'll do

• Support ongoing operation and maintenance of the vulnerability management program.
• Manage vulnerability scanning tools and refine detection to reduce false positives.
• Generate and distribute monthly and quarterly compliance reports.
• Collaborate with engineering teams to track and support remediation of vulnerabilities.
• Analyze and triage vulnerabilities, escalating critical issues as needed.
• Participate in incident investigations for high-profile vulnerabilities.
• Contribute to documentation and process improvements for vulnerability workflows.

What you'll need

• 2-4 years of relevant experience in security engineering, vulnerability management, or a related technical field.
• Familiarity with security engineering best practices and the ability to assess severity and impact.
• Scripting experience, preferably Python, with Pandas for data analysis.
• Understanding of cloud environments (AWS preferred) and infrastructure-as-code concepts.
• Experience working in Linux-based environments and troubleshooting security-related issues.
• Exposure to security automation tools is beneficial (e.g., Tines, AWS Lambda).

Nice to have

• Hands-on experience with vulnerability management tools such as Wiz or Semgrep.
• Practical experience managing vulnerabilities within a FedRAMP-certified environment.
• Experience integrating vulnerability management into CI/CD pipelines with a “shift-left” mentality.
• Terraform experience.

Details

• Location: Bengaluru - BLR1.