{"id":3948536,"url":"https://alion.io/job/wsp-application-vulnerability-management-specialist","title":"Application Vulnerability Management Specialist","company":{"id":1668012,"name":"WSP","domain":"wsp.com","url":"https://alion.io/company/wsp-ca","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":77,"open_postings":449,"ghost_share":0,"stale_share":0.938,"repost_share":0.002,"time_to_fill_p50_days":41,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India","Mumbai, India","Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"Google Workspace","optional":false},{"name":"ITSM","optional":false},{"name":"KEV","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"ServiceNow","optional":false},{"name":"Smartsheet","optional":false}],"status":"live","first_seen_at":"2026-11-08T23:35:15Z","employer_posted_date":null,"last_verified_at":"2026-11-08T23:35:15Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Job Description:\n\nThe Application Vulnerability Management Specialist is a security-focused individual contributor responsible for identifying, prioritising and coordinating the remediation of vulnerabilities across COTS and Microsoft 365 application portfolios. The estate includes:\n\nCollaboration - tools that connect people and teams (e.g. Zoom, Teams).\nProductivity - applications that support day-to-day business output (e.g. Microsoft 365 Apps, Adobe Acrobat, Google Workspace, Smartsheet).\nUtilities - general end-user desktop utilities that support the estate (e.g. WinZip / 7-Zip, TeamViewer, Notepad++, Snagit).\n\nUsing Microsoft Defender Vulnerability Management, Intune and ServiceNow, you will turn vulnerability data into clear priorities, coordinate remediation with technical teams and suppliers, and report progress to stakeholders. You will apply risk factors such as CVSS, EPSS, CISA KEV, asset criticality and business impact to reduce exposure while maintaining operational stability across a global environment.\n\nResponsibilities:\nMaintain an accurate view of application vulnerabilities, affected devices and remediation status using Defender Vulnerability Management, Intune and ServiceNow.\nAssess and prioritise findings using CVSS, EPSS, CISA KEV, exploit intelligence, asset criticality and business context.\nMonitor vulnerabilities, misconfigurations and security-baseline gaps across COTS and Microsoft 365 applications.\nCoordinate patching, configuration changes and other mitigations with End User Device, deployment, engineering and supplier teams.\nManage findings from validation through remediation, verification and closure, with clear ownership and agreed service levels.\nManage time-bound exceptions and risk acceptances, documenting compensating controls and reviewing them at expiry.\nSupport application hardening, security-baseline compliance and attack-surface reduction using recognised Microsoft, CIS and industry guidance.\nPromote least privilege and controlled elevation through endpoint privilege management practices and tooling.\nContribute security and vulnerability requirements to the onboarding and review of business applications.\nProvide clear dashboards and reports on exposure, remediation progress, SLA performance, ageing, recurrence and security-baseline compliance.\nTranslate trends and technical findings into practical recommendations for management, audit and operational teams.\nMaintain proportionate procedures and evidence aligned with ITSM, ISO/IEC 27001 and relevant vulnerability-management guidance.\nSkills\nCISA, CVSS, Defender, EPSS, Intune, M365, Microsoft 365, ServiceNow, Vulnerability","description_format":"text","description_chars":2657,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Civil & Structural Engineering"],"lifecycle":[{"event":"open","at":"2026-11-08T23:35:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":41,"reasons":["seen:0","win:early","comp:brand"],"computed_at":"2026-11-09T01:46:35Z"},"pay":null,"html_url":"https://alion.io/job/wsp-application-vulnerability-management-specialist","json_url":"https://alion.io/job/wsp-application-vulnerability-management-specialist.json","meta":{"generated_at":"2026-11-09T01:46:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3728,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1668012},"rest":"https://alion.io/mcp/rest/get_company?id=1668012"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwsp-application-vulnerability-management-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwsp-application-vulnerability-management-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwsp-application-vulnerability-management-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wsp-application-vulnerability-management-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwsp-application-vulnerability-management-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3948536}},{"tool":"search_jobs","arguments":{"company":"wsp.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3948536},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}