Cybersecurity Vulnerability Management & Assurance Specialist

About the role

We are looking for a Cybersecurity Vulnerability Management & Assurance Specialist to lead our vulnerability scanning, analysis and remediation efforts across the organization. The role will work closely with IT, network and application teams to ensure a robust security posture and compliance with industry standards.

Key responsibilities

• Perform regular vulnerability scans using tools such as Nessus, Qualys, or equivalent.
• Conduct authenticated and unauthenticated scans across the infrastructure and validate/eliminate false positives.
• Analyze vulnerabilities using CVSS scoring and prioritize based on business criticality, asset exposure, and exploit availability.
• Collaborate with server, network and application teams to remediate findings and track progress via ServiceNow, Jira or similar ticketing systems.
• Ensure closure of vulnerabilities within defined SLAs and escalate overdue critical risks.
• Prepare technical and management vulnerability reports, dashboards, trend analyses and risk‑posture updates.
• Support compliance with ISO/IEC 27001, NIST and other relevant security frameworks.
• Deliver security awareness and training sessions on secure configuration, patch management and vulnerability mitigation techniques.

Required profile

• Hands‑on experience with vulnerability scanning tools (e.g., Nessus, Qualys).
• Good understanding of Windows and Linux operating‑system vulnerabilities.
• Knowledge of CVE analysis, patch and vulnerability management processes.

Required skills

• Nessus
• Qualys
• CVSS scoring
• CVE analysis
• Patch management
• Windows vulnerability assessment
• Linux vulnerability assessment
• Network security basics
• Web application security basics
• Security best practices