Vulnerability Management Mumbai 2-4 Years
Job Summary
Join the Mumbai-based technology hub of a global insurance powerhouse where innovation meets the stability of a leading international group. This captive IT organization serves as a critical engine for the groups worldwide digital transformation leveraging a startup-inspired mindset to build complex customer-centric insurance solutions. We are currently facilitating the search for high-caliber talent to join this inclusive performance-driven environment that offers structured career roadmaps bespoke professional development and the opportunity to impact a global value chain.
- maintaining control of Nessus/Tenable-based VM hardware systems and application software performing upgrades and other maintenance activities for scanning infrastructure and related tools
- deploying new scanning infrastructure/tools and supporting solutions o automating processes through scripting and providing API support/integration
- maintaining technical documentation of the VM program including requirements architecture designs network topology applications and application security designs
- facilitating and coordinating vulnerability assessment and scanning reviewing assessment results patching and remediating activities related to workstations servers storage databases appliances web applications and network devices
- assisting the Vulnerability Management (VM) team to collaborate coordinate mnitor and support activities in the areas of the VM program
- security patching and remediating management with a special focus on operational stability o analysing assessment results and threat feeds to properly react to security weaknesses or vulnerabilities
- collaborating on and providing VM results and metrics for consistent reporting for governance purposes VM metrics key risk indicators trending and compliance
- providing input helping prepare and update VM roadmap developing maintaining and publishing project plans and operation schedules
- helping develop a long-term VM strategy that will address global information security needs (current state gaps and opportunities)
.
Summarized Skills: - proven experience in the IT security field e.g. vulnerability management security operations security engineering
- knowledge of scanning and vulnerability analysis tools (Nessus/
- knowledge and experience in administering IT components (systems networks servers)
- high analytical skills to identify and troubleshoot complex problems o knowledge of IT service management processes (ITIL certification is a plus)
- ability to work in a multinational and complex environment
- desire to keep learning extending your skills
- Unix/Windows/networking background (administration of scanning infrastructure)
Required Skills:
Technical SkillExperience in designing Java applications. Strong experience in creating front-end layers of software in Java technology: Java Spring boot Hibernate Spring - Expert understanding in SOA ESB Messaging Event Processing technologies - Experience with relational and non-relational dbs like SQL Server My SQL Casandra or Mongo Redis/mem-cached for implementing caching solutions - Experience in AGILE (SCRUM) methodology and ability to define product life cycle - Strong foundation knowledge around integration technologies such as MuleSoft Apache Storm Kafka etc. - Presentation skills with a high degree of comfort with both large and small audiences Secondary Skills: ----- Need to work closely with Business and Technical Stakeholders to understand the functional and non-functional requirements.