Key Responsibilities: • Own and manage the end-to-end vulnerability management lifecycle, from identification and validation through remediation and closure. • Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud environments, networks, and applications. • Analyze and validate vulnerability scan results, including identifying false positives and determining actual exposure. • Perform risk-based vulnerability prioritization considering factors beyond CVSS/severity, including asset criticality, business impact, exploitability, exposure, and active exploitation. • Investigate vulnerabilities across Windows and Linux environments and coordinate appropriate remediation activities. • Assess security vulnerabilities across cloud and endpoint environments. • Define technical remediation and mitigation steps and work with relevant teams to implement them. • Document technical findings, evidence, risk, business impact, and recommended remediation actions. • Drive vulnerability remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams. • Track remediation progress and ensure vulnerabilities are addressed within defined remediation SLAs. • Perform remediation validation through re-scanning, technical verification, or other appropriate methods. • Support endpoint security and vulnerability management activities using relevant security platforms. • Maintain the vulnerability dashboards, reports, remediation status, and risk documentation. • Provide regular updates to security and business stakeholders regarding critical findings, remediation progress, exceptions, and outstanding risks. • Support investigation and response activities for critical or actively exploited vulnerabilities, including zero-day vulnerabilities when required. Required Qualifications: • 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or a related security domain. • Hands-on experience in vulnerability assessment and vulnerability management. • Strong understanding of risk assessment and risk-based vulnerability prioritization, beyond simply relying on CVSS/severity ratings. • Ability to analyze, investigate, and validate vulnerability scan results. • Strong knowledge of endpoint security and vulnerability remediation. • Good understanding of Windows and Linux operating systems from a security perspective. • Working knowledge of networking and network security fundamentals. • Understanding basic application security and common application vulnerabilities. Experience working with some of the following security technologies/tools: • Wiz • CrowdStrike • Nexpose / Rapid7 • Splunk • AppSpider • ServiceNow Ability to document technical security findings and define appropriate remediation/mitigation steps. Demonstrated experience driving remediation activities across multiple technical teams. Strong communication, stakeholder management, ownership, and follow-up skills. Preferred Qualifications: • Experience in Security Operations (SecOps) and/or Vulnerability Management. • Exposure in security environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP). • Experience with zero-day vulnerability identification, assessment, response, and remediation. • Experience working with remediation SLAs and vulnerability tracking. • Familiarity with security exceptions, risk acceptance, compensating controls, and risk treatment processes. • Experience coordinating remediation across infrastructure, cloud, network, application, and DevOps teams. Relevant security certifications such as: • CompTIA Security+ • CompTIA CySA+ • GIAC Security Essentials (GSEC)