Engineer - Information Security

We are seeking a skilled Vulnerability Assessment Engineer with 3-5 years of experience in identifying, analyzing, and managing security vulnerabilities across on-premise and cloud environments. The ideal candidate should have hands-on experience with Tenable/Nessus and Prisma Cloud, along with a strong understanding of security best practices and risk mitigation.

Key Responsibilities:

Perform regular vulnerability assessments using tools like Tenable/Nessus

Analyze scan results, prioritize vulnerabilities, and provide remediation recommendations

Manage and maintain vulnerability scanning tools and dashboards

Conduct authenticated and unauthenticated scans across networks, systems, and applications

Work with IT and DevOps teams to ensure timely closure of vulnerabilities

Perform cloud security assessments using Prisma Cloud (formerly Twistlock/RedLock)

Validate remediation through re-scans and verification processes

Generate detailed vulnerability reports and risk assessments for stakeholders

Ensure compliance with security standards (ISO 27001, PCI-DSS, etc.)

Track vulnerabilities through lifecycle until closure

Required Skills:

Hands-on experience with Tenable Security Center / Nessus

Experience in vulnerability scanning and management

Exposure to Prisma Cloud (Cloud security posture management)

Strong understanding of network security concepts (ports, protocols, firewalls)

Knowledge of common vulnerabilities (OWASP Top 10, CVEs, CVSS scoring)

Experience with Windows, Linux, and basic system hardening

Familiarity with ticketing tools (ServiceNow, JIRA, etc.)

Basic scripting knowledge (Python / Bash - added advantage)

Good analytical and reporting skills

Good to Have Skills:

Experience in cloud platforms (AWS / Azure / GCP)

Knowledge of container security (Docker, Kubernetes)

Certifications like CEH, CompTIA Security+, or Tenable certifications

Exposure to SIEM tools

Experience with patch management processes