{"id":4008700,"url":"https://alion.io/job/kaptest-vulnerability-management-engineer-hybrid","title":"Vulnerability Management Engineer (Hybrid)","company":{"id":1776152,"name":"Kaptest","domain":"kaptest.com","url":"https://alion.io/company/kaptest-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITSM","optional":false},{"name":"KEV","optional":false},{"name":"Linux","optional":false},{"name":"PCI DSS","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Bash","optional":true},{"name":"GCP","optional":true},{"name":"Jira","optional":true},{"name":"Kubernetes","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-11-10T08:35:00Z","employer_posted_date":null,"last_verified_at":"2026-11-10T08:35:00Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"The Vulnerability Management Engineer role will strengthen the security posture of the KNA organisation by owning the end-to-end vulnerability management lifecycle, from discovery and analysis through remediation and verification. This position will operate and optimise enterprise vulnerability management tools, deliver in-depth remediation analysis that prioritises the risks that matter most, and serve as a key responder during security incidents and actively exploited vulnerabilities. The Vulnerability Management Engineer will partner closely with IT, cloud, and engineering teams to drive measurable reductions in exposure and time to remediate.\n\nPrimary Responsibilities:\nAdminister and optimise enterprise vulnerability management platforms (e.g., Tenable, Qualys, Rapid7, CrowdStrike Falcon Spotlight) across on-premises, cloud, container, and endpoint environments, ensuring complete asset coverage, authenticated scanning, and reliable, current findings.\nPerform in-depth vulnerability remediation analysis by validating findings, eliminating false positives, identifying root causes and recurring patterns, and prioritising risk based on exploitability, threat intelligence (e.g., CISA KEV, EPSS), asset criticality, and business impact.\nPartner with infrastructure, cloud, application, and endpoint owners to define remediation plans, provide clear technical guidance, and track progress to closure against defined SLAs, escalating overdue or high-risk items to drive measurable reductions in exposure and time to remediate.\nRespond to security incidents and actively exploited vulnerabilities (e.g., zero-day events) by triaging alerts, rapidly identifying affected assets, and supporting investigation, containment, eradication, and recovery with the SOC and incident response team. Participate in a rotational on-call schedule that supports follow-the-sun incident coverage with US-based colleagues.\nStrengthen incident response readiness by developing and maintaining playbooks and runbooks for vulnerability-driven incidents, participating in tabletop exercises, and leading post-incident reviews that capture lessons learned and drive control improvements.\nDevelop and maintain dashboards, metrics, and executive reporting (e.g., mean time to remediate, SLA compliance, risk reduction trends, scan coverage) that give security leadership and control owners clear visibility into vulnerability risk.\nAutomate vulnerability management workflows, such as ticket creation, asset-owner mapping, risk enrichment, and reporting, using scripting and APIs, and integrate vulnerability tools with ITSM, CMDB, SIEM, and EDR platforms to reduce manual effort and accelerate remediation.\nManage the vulnerability exception and risk acceptance process by documenting compensating controls, confirming appropriate approvals, and tracking exceptions through to expiry.\nSupport audits and compliance activities by providing evidence and reporting for vulnerability and patch management controls aligned to ISO 27001, PCI DSS, SOX, SOC 2, and other relevant standards, and evaluate emerging tools and threat intelligence to continuously improve the program.\n\nMinimum Qualifications:\nBachelor's degree in Computer Science, Information Systems (IS), Cybersecurity, or related field; or an equivalent combination of training and progressively responsible experience that will result in the required specialized knowledge and abilities to perform the assigned work in lieu of degree.\n5+ years of information security experience, including hands-on vulnerability management and security incident response experience.\nHands-on expertise with enterprise vulnerability management tools (e.g., Tenable, Qualys, Rapid7, CrowdStrike Falcon Spotlight), including scan policy design, authenticated and agent-based scanning, asset coverage management, and false-positive validation.\nVery strong vulnerability remediation analysis skills, including risk-based prioritisation using CVSS, EPSS, CISA KEV, threat intelligence, and asset context, and the ability to translate findings into clear, actionable remediation guidance for Windows, Linux, network, cloud, and container environments.\nDemonstrated incident response experience, including triage, investigation, containment, eradication, recovery, and post-incident review, with working knowledge of SIEM and EDR platforms and the MITRE ATT&CK framework.\nStrong understanding of vulnerability, patch, and configuration management practices and of security frameworks and standards (e.g., NIST, ISO 27001, PCI DSS, CIS Benchmarks).\nExcellent analytical, problem-solving, and communication skills, with the ability to influence technical and non-technical stakeholders and to work both independently and collaboratively in a fast-paced environment.\nRelevant certifications such as GCIH, GCFA, CISSP, CEH, or Security+ are highly desirable.\n\nPrimary Qualifications:\nExperience with cloud security posture and vulnerability management in AWS, Azure, or GCP, including container and Kubernetes security.\nAbility to automate security and operational tasks using scripting languages (e.g., Python, PowerShell, Bash) and APIs.\nExperience integrating vulnerability data with ITSM and workflow tools (e.g., ServiceNow, Jira) to orchestrate remediation.\nExperience supporting audit evidence requests for SOX, PCI DSS, or ISO 27001 controls.\nSkills\nCrowdStrike, EDR, MITRE ATT&CK, Qualys, Rapid7, SIEM, Tenable, Vulnerability","description_format":"text","description_chars":5455,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-10T08:35:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["seen:0","win:early"],"computed_at":"2026-11-10T09:59:11Z"},"pay":null,"html_url":"https://alion.io/job/kaptest-vulnerability-management-engineer-hybrid","json_url":"https://alion.io/job/kaptest-vulnerability-management-engineer-hybrid.json","meta":{"generated_at":"2026-11-10T09:59:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23206,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1776152},"rest":"https://alion.io/mcp/rest/get_company?id=1776152"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkaptest-vulnerability-management-engineer-hybrid"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkaptest-vulnerability-management-engineer-hybrid"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkaptest-vulnerability-management-engineer-hybrid"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kaptest-vulnerability-management-engineer-hybrid\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkaptest-vulnerability-management-engineer-hybrid"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4008700}},{"tool":"search_jobs","arguments":{"company":"kaptest.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4008700},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}