Full stack engineer with Vulnerability Management
Job Description:
Full stack developer with experience in following areas, Java, Spring Boot, Maven, Node.js, NPM, React, CI/CD, JUNIT, Tosca, LitmusStrong experience in Vulnerability Management and enterprise remediation programs.
Expertise in Cybersecurity Governance, Risk Management, and Compliance.
Experience coordinating vulnerability remediation across:
- Middleware Platforms, Server/Platform Infrastructure, Databases, Applications, Cloud and On-Prem Environments
- Knowledge of enterprise vulnerability management tools such as Qualys, Tenable, Rapid7, ServiceNow Vulnerability Response.
- Experience managing remediation activities for BI and Analytics platforms: Tableau, Micro
- Strategy, Cognos, Power BI, TIBCO, Starburst· Strong understanding of:
- CVSS Scoring, Security Risk Ratings, Patch Management, Vulnerability Lifecycle Management, Risk Acceptance / Exception Processes
- Experience with security governance reporting, audit support, and compliance requirements.
- Strong stakeholder management and cross-functional coordination skills.
- ServiceNow, Jira, ConfluenceITIL Processes (Incident, Change, Problem Management)
- Enterprise Infrastructure & Platform Services
- Vendor Management
- Reporting & Dashboarding (Power BI, Excel)
- Process Improvement and Automation · Banking/Financial Services domain experience preferred
Roles & Responsibilities:
- Lead end-to-end execution of enterprise vulnerability remediation initiatives.
- Coordinate remediation efforts across Infrastructure, Middleware, Database, Platform, Application, and Security teams.
- Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
- Drive closure of security vulnerabilities within enterprise-defined SLAs.
- Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.
- Partner with Information Security, GIS, Infrastructure Services, Database Services, Middleware Services, Application Support teams, and external vendors.
- Track and report:
- Open vulnerabilities, Aging vulnerabilities, Compliance status, Risk exposure, Remediation progress
- Escalate overdue remediation activities, resource constraints, and critical risks.
- Ensure remediation activites meet audit, regulatory, and security compliance requirements.
- Maintain remediation evidence and documentation for audits and compliance reviews.
- Monitor vulnerability dashboards and ensure accuracy of governance metrics.
- Drive continuous improvement initiatives around remediation processes, governance, reporting, and automation.
- Act as the central point of contact between technology teams, security teams, leadership, and vendors.