Sr. Security Specialist (Vulnerability Management)

Job Title: Cyber Security Specialist – Sr. Security Specialist (L4) Location: India Shift: EMEA Experience: 15+ years relevant experience Priority Skills: Vulnerability management (Nessus/CVSS), cloud security posture (AWS/Azure), XDR/endpoint security, SOAR-driven remediation, Zero Trust fundamentals, and current threat-intel practices. Key Responsibilities Conduct hands-on vulnerability assessments (Nessus, Qualys, or equivalent), analyze CVSS scores, and prioritize remediation based on risk exposure across 40 countries. Manage endpoint security (AV, XDR) and cloud security posture across AWS, Azure, and infra SDN components, including CSPM tooling (e.g., Wiz, Prisma Cloud, Defender for Cloud). Own infrastructure security for Windows/Linux servers and network devices — patch management, server/network hardening, and CIS compliance checks. Drive remediation and solution advisory: liaise with operational technology teams, country D&T heads, CIOs, and vendors to close out infrastructure findings on critical assets. Lead threat investigations and intelligence work — identify threats from s/advisories, apply frameworks like MITRE ATT&CK, and coordinate response with vendors where operational technology is affected. Support SOAR-based automated response and playbook-driven remediation to reduce manual triage time. Contribute to Zero Trust initiatives — identity-centric access controls, micro-segmentation, and reduced implicit trust across the estate. Stay current on AI/GenAI-related security risk (e.g., securing AI-enabled tooling, awareness of prompt-injection and data-leakage risks in copilots/agents used internally). Drive security awareness — communicate recommendations to end users after breaches or PUP/malware-related threats, and help improve organization-wide threat exposure scores across 40 countries. Required Skills Vulnerability Management — Nessus (or equivalent), CVSS scoring, risk-based prioritization. Cloud Security — Hands-on with AWS and Azure; familiarity with CSPM/CNAPP tooling. Endpoint & XDR — CrowdStrike, SentinelOne, Microsoft Defender, or equivalent. Infrastructure Hardening — Windows/Linux server security, patch management, CIS benchmarks. Threat Intelligence & Investigation — triage, threat hunting, MITRE ATT&CK familiarity. SOAR / Automation — Experience with automated remediation playbooks and SOC tooling integration. Zero Trust — Understanding of identity-centric security and micro-segmentation principles. Communication — Strong stakeholder management across global, multi-country teams (D&T heads, CIOs, vendors). Preferred Qualifications Certifications: CISSP, CISM, or equivalent; cloud security certs (AWS Security Specialty / Azure Security Engineer) a plus. Prior experience securing hybrid/multi-cloud, multi-country enterprise environments (40+ countries a strong plus). Exposure to AI-enabled security tooling or securing GenAI/agentic workflows.

AWS Security, Azure Security, Network Security