Vulnerability / Devsecops / Network / SOC / Threat Analysis

Job Title: Vulnerability Management G Incident Response Engineer Role Overview

Responsible for identifying, assessing, prioritizing, and coordinating remediation of security vulnerabilities across enterprise infrastructure, endpoints, applications, and cloud environments. The role also supports incident response activities, forensic evidence collection, containment, and post-incident remediation. The candidate should be capable of managing the vulnerability lifecycle independently and supporting structured incident response for medium- and high-severity incidents.

Key Responsibilities:

•  Plan and execute vulnerability scans across servers, endpoints, network devices, cloud workloads, and supported assets.

•  Configure and maintain vulnerability scanning tools.

•  Validate scan coverage, credentials, and asset discovery.

•  Analyze vulnerability reports and identify false positives.

•  Support authenticated and unauthenticated scanning as appropriate.

•  Prioritize vulnerabilities based on severity, exploitability, asset criticality, and business impact.

•  Coordinate remediation with infrastructure, network, cloud, and application teams.

•  Track remediation progress against defined SLAs.

•  Perform rescans and validate remediation effectiveness.

•  Escalate overdue critical vulnerabilities and unresolved risks.

•  Support exception and risk acceptance processes.

•  Participate in security incident investigation and response.

•  Support incident triage, scoping, and containment.

•  Collect relevant logs, endpoint telemetry, and other evidence.

•  Coordinate with SOC, network, endpoint, and infrastructure teams.

•  Support eradication and recovery activities.

•  Prepare incident reports and lessons-learned documentation.

•  Prepare risk-based vulnerability dashboards and management reports.

•  Track remediation metrics and recurring security weaknesses.

•  Support audit, compliance, and risk assessments.

•  Maintain vulnerability management procedures and incident response playbooks.

Tools and Technologies

Category                                                       Tools

Vulnerability Scanning: Tenable Nessus / Tenable Vulnerability Management, ?ualys VMDR, Rapid7 InsightVM

Web Application Scanning: Burp Suite Professional, OWASP ZAP, Invicti (where deployed) Cloud Vulnerability: Defender for Cloud, AWS Inspector, cloud-native security tools Endpoint Detection: Microsoft Defender for Endpoint, CrowdStrike Falcon

Incident Response: Velociraptor, KAPE, FTK Imager (where approved), vendor EDR investigation tools Log Analysis: Microsoft Sentinel, Splunk, ?Radar

Threat Intelligence: VirusTotal, MISP, abuse.ch feeds

Recommended recruitment requirement: Hands-on experience with at least one enterprise vulnerability management platform and one incident response / endpoint investigation platform. Technical Skills

•         Vulnerability management lifecycle and risk-based prioritization.

•         CVE, CVSS, and vulnerability remediation concepts.

•         Windows, Linux, network device, and cloud vulnerability assessment.

•         Patch management and configuration hardening.

•         Incident response lifecycle.

•         Basic digital forensics and evidence handling.

•         Log analysis and threat investigation.

•         Reporting and remediation tracking.