Job Description

• Vulnerability Management Program

Objective of the program is to proactively identify weaknesses at various layers technology layers which includes, Operating system, Middleware, Database, Application and Network. Prepare remediation plan based on priority and ensue execution of plan as agreed with stakeholders. Derive performance indicators on remediation of vulnerabilities and ensure minimum exceptions. Manage critical vulnerabilities using advisories, well defined remediation plan which includes for data center assets as well as user end points. Outlining and implementing continual improvement program under vulnerability management for applications, API, infrastructure components and SAAS platforms.

• External and Internal Pentesting program

Based on the output of vulnerability management program , define internal and external pentesting strategy. Develop annual penetesting program for infrastructure and applications. Define scope of third party external pentesting, test cases for external pentesting and perform gray or black box testing.

• Managing External Cyber Risk Score

Monitor external cyber risk score and ensure it is maintained at an acceptable level for each of the platform used. Ensure hardening standards and vulnerability free infrastructure is put in place exposed on the internet which will reduce the attack surface and improve the Cyber Risk Score. In case of any findings reported , the same is addressed within agreed timelines with Internal stakeholders. Put in place proactive measure to monitor cyber security posture on the internet facing web applications and infrastructure component.

Primary skills

• Vulneribility managament
• Cyber security
• Incident management

Secondary skills

• Security orchestration