{"id":3433620,"url":"https://alion.io/job/staples-india-lead-security-engineer-vulnerability-management","title":"Lead Security Engineer – Vulnerability Management","company":{"id":4441822,"name":"Staples India Business Innovation Hub","domain":"staplesindia.in","url":"https://alion.io/company/staples-india","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":{"grade":"B","score":78,"open_postings":37,"ghost_share":0,"stale_share":0.865,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":50000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"KEV","optional":false},{"name":"LLM","optional":false},{"name":"Orca Security","optional":false},{"name":"PCI DSS","optional":false},{"name":"Power BI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false},{"name":"UVM","optional":false}],"status":"live","first_seen_at":"2026-10-15T00:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-11-05T08:31:24Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"This role is designed for a lead cybersecurity engineer with approximately 8+ years of experience in vulnerability management, exposure management, offensive security, application security, and security automation. The position serves as a technical lead and subject-matter expert for the vulnerability management function, helping shape the roadmap and owning delivery of maturity initiatives from approach through measurable outcomes. The Lead Security Engineer will partner with cybersecurity, infrastructure, application, and platform teams to evolve vulnerability management into a proactive, risk-based program. The role brings depth in areas such as risk-based prioritization, automation and AI-assisted triage, application security, vulnerability disclosure, and offensive security, and mentors engineers to scale proven practices. Duties &Responsibilities\nServe as technical lead and subject-matter expert for vulnerability management, advising on program direction, tooling, and prioritization across Staples environments.\nOwn end-to-end delivery of vulnerability management maturity projects, from defining the approach and success measures through implementation, adoption, and reporting.\nDesign and build automation and AI-assisted workflows for triage, enrichment, ticketing, and reporting that reduce manual effort and improve time to remediation.\nBuild and mature offensive security capabilities, including internal penetration testing, segmentation testing, purple-team exercises, and vulnerability disclosure and bug bounty programs.\nEvaluate and onboard new security capabilities, running proofs of concept and recommending adopt, extend, or retire decisions.\nDefine runbooks, quality standards, and handoff practices for operational work, and coach engineers as proven processes are scaled across teams.\nSupport PCI DSS, SOC 2, customer audit requests, and other compliance activities by providing accurate vulnerability evidence and remediation status.\nReport program health to senior leaders through dashboards and metrics that tie vulnerability data to business risk. Technologies:\nQualys, NoName API Security, Seemplicity UVM/UEM, FIM, ServiceNow, CheckmarxOne, Orca Security, GitHub, EASM, CSPM, Rapid7 DAST\nVulnerability management, exposure management, DAST, API security, SAST, SCA, CSPM, IoT/OT security, threat intelligence, penetration testing, purple teaming\nPython, PowerShell, Bash, REST APIs, Git, Power BI, LLM and AI-agent frameworks, ServiceNow workflows\nRequirements Minimum of 8+ years of hands-on cybersecurity experience, including significant depth in vulnerability management, offensive security or application security testing, and security automation, with experience leading projects or mentoring others. Basic\nQualifications\nExpert-level experience with vulnerability management platforms, scanning, and the full lifecycle from detection and prioritization to remediation and verification.\nStrong understanding of risk-based prioritization models and signals such as CVSS, EPSS, CISA KEV, and exploit maturity.\nHands-on experience with offensive security techniques, such as penetration testing, web and API testing, or red/purple teaming, and with DAST or application security tooling.\nProficiency in Python or a comparable language for automation, API integrations, and data analysis, plus familiarity with applying LLMs to security workflows.\nProven ability to lead projects, document processes clearly, and mentor engineers.\nPreferred\nQualifications\nRelevant certifications such as OSCP, GPEN, GWAPT, CISSP, or equivalent offensive and security certifications.\nExperience with ServiceNow, Seemplicity, or similar remediation workflow and exposure-management platforms, with defined SLAs and ownership tracking.\n• Experience building or running vulnerability disclosure or bug bounty programs, IoT/OT security assessments, or threat-intelligence pipelines is preferred.","description_format":"text","description_chars":3920,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-29T01:51:46Z"}],"visa":[],"liveness":{"score":46,"band":"ok","label":"Likely open","p_open":1,"p_active":0.612,"p_room":0.75,"age_days":21,"expected_fill_days":29,"reasons":["conf:2","stale_co","velocity","win:late"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/staples-india-lead-security-engineer-vulnerability-management","json_url":"https://alion.io/job/staples-india-lead-security-engineer-vulnerability-management.json","meta":{"generated_at":"2026-11-05T09:16:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11748,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4441822},"rest":"https://alion.io/mcp/rest/get_company?id=4441822"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstaples-india-lead-security-engineer-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstaples-india-lead-security-engineer-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstaples-india-lead-security-engineer-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/staples-india-lead-security-engineer-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstaples-india-lead-security-engineer-vulnerability-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3433620}},{"tool":"search_jobs","arguments":{"company":"staplesindia.in","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3433620},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}