{"id":1266288,"url":"https://alion.io/job/risosu-consulting-llp-vulnerability-management-engineer-application-security","title":"Vulnerability Management Engineer - Application Security","company":{"id":3798365,"name":"Risosu Consulting","domain":"risosu.com","url":"https://alion.io/company/risosu-consulting-llp","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":33000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CVSS","optional":false},{"name":"Fortify","optional":false},{"name":"Java","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Azure","optional":true},{"name":"Azure DevOps","optional":true},{"name":"Power BI","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-09-07T04:59:54Z","employer_posted_date":null,"last_verified_at":"2026-09-07T04:59:54Z","board_verified":false,"closed_at":null,"days_open":37,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":37},"description":"Vulnerability Management Engineer - Application Security\n\nBasic Purpose : \n\nWe are seeking a mid-level engineer to identify, manage, and remediate application vulnerabilities throughout the software development lifecycle. This role plays a key part in maintaining our security posture across web, mobile, and cloud-based applications. Ideal candidates will have deep technical curiosity and practical experience with vulnerability scanning, security assessments, prioritization, and coordination of remediation efforts.\n\nResponsibilities : \n\n- Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.\n\n- Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.\n\n- Manage multiple application security initiatives concurrently while meeting strict timelines in a fast-paced environment.\n\n- Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).\n\n- Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).\n\n- Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.\n\n- Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.\n\n- Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.\n\n- Participate in high-severity or zero-day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.\n\n- Provide input into policies and standards related to application and cloud security controls.\n\nQualifications and Education Requirements : \n\n- Bachelor's degree in information technology, Cybersecurity, Computer Science, or related discipline - or equivalent professional experience.\n\n- 5 - 7 years of relevant experience in application security and/or vulnerability management.\n\n- Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.\n\n- Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business-logic vulnerabilities.\n\n- Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).\n\n- Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.\n\n- Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.\n\n- Excellent documentation, communication, and stakeholder engagement skills.\n\nDesired Skills : \n\n- Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).\n\n- Experience using the ServiceNow platform for vulnerability or incident tracking.\n\n- Proficiency in Azure cloud and Azure DevOps environments.\n\n- Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.\n\nSkills\nVulnerability Assessment, Vulnerability Management, Applications Security, IT Security Strategy, Security Protocols, SAST, DAST, Cyber Security, Python, NIST, OWASP","description_format":"text","description_chars":3519,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-09-25T22:00:00Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.606,"p_room":0.45,"age_days":37,"expected_fill_days":23,"reasons":["seen:37","velocity","win:tail"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/risosu-consulting-llp-vulnerability-management-engineer-application-security","json_url":"https://alion.io/job/risosu-consulting-llp-vulnerability-management-engineer-application-security.json","meta":{"generated_at":"2026-10-14T20:29:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27233,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3798365},"rest":"https://alion.io/mcp/rest/get_company?id=3798365"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frisosu-consulting-llp-vulnerability-management-engineer-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frisosu-consulting-llp-vulnerability-management-engineer-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frisosu-consulting-llp-vulnerability-management-engineer-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/risosu-consulting-llp-vulnerability-management-engineer-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frisosu-consulting-llp-vulnerability-management-engineer-application-security"}]}