Vulnerability Management Specialist

Tata Consultancy Services (Tcs)

Chennai

Not disclosed

Work from Office

Full Time

Min. 5 years

Job Details

Job Description

VAPT/ Vulnerability Management

Discovery of Assets and Vulnerability assessment on IP Assets, analysis/classification of
Vulnerability based on risk rating.
Analysis of vulnerabilities disclosed by vendors, internal/external sources, and vulnerability
and intelligence feeds.
Monitor news and intelligence feeds on a daily basis to proactively identify vulnerabilities that
may impact the organization.
Provides analysis of vulnerabilities to other team members to assist with overall vulnerability
remediation efforts.
Support the identification and impact classification for new vulnerabilities identified in the
environment.
Execute and support vulnerability assessments.
Provide Vulnerability Management (VM) team information on the emerging Enterprise
vulnerability landscape, in collaboration with the Cybersecurity Operations organization.
Brief VM leadership on vulnerability assessment results and potential risks.
Continue self-development of knowledge, skills, and abilities to better support execution of
the Information Security (IS) function.
Help Vulnerability Management (VM) Team for maintaining appropriate documentation that
defines the Threat & Vulnerability Management Program, Policy, and Procedure
Expertise and experience of conducting VAPT (Vulnerability Assessment and Penetration Testing) as per standards such as OWASP Top 10, SANS Top 25 and WASC, NIST, CISA
Experience in Web Application Security Testing, Network security testing, Source code Review and Vulnerability Assessment and Penetration testing (SAST and DAST)
Strong Experience of using open- source tools and commercials tools such as but not limited to Burp Suite, Metasploit, Nessus, Acunetix and open source with operating systems Windows and Linux.
Perform research on new vulnerabilities, attack vectors, exploits, tools and industry trends for the above- mentioned services.
CEH Certification Mandatory.
Candidates with CISM, OSCP are preferred.