3 days ago
Bengaluru, IndiaMid Level
Responsibilities
- Run vulnerability scans and assessments across products, containers, Kubernetes environments, and cloud infrastructure.
- Analyze CVEs, scan results, penetration-test findings, and security advisories, then prioritize vulnerabilities based on exploitability, exposure, risk, business impact, and SLAs.
- Validate exploitability and provide practical remediation guidance to engineering and DevOps teams.
- Coordinate vulnerability assignment, remediation tracking, overdue-item follow-up, and closure verification.
- Monitor vendor notifications, security advisories, and cyber threat intelligence for relevant vulnerabilities.
- Produce vulnerability reports and metrics covering remediation time, vulnerability aging, risk trends, and SLA adherence.
- Deploy, manage, troubleshoot, and maintain vulnerability-management and security tools.
- Handle tier-two operational tasks and incidents and participate in incident response when vulnerabilities are actively exploited.
- Use approved AI and LLM tools for vulnerability triage, CVE analysis, advisory summaries, remediation guidance, and workflow automation.
- Build or improve automation and AI-assisted workflows that reduce manual vulnerability-management effort.
Requirements
- At least two years of experience in vulnerability management, security engineering, product security, or a related security role.
- Working knowledge of vulnerability-management principles, CVE and CVSS scoring, common vulnerabilities, attack vectors, exploitation techniques, and risk-based prioritization.
- Hands-on experience with vulnerability-scanning tools such as Wiz, Qualys, Nessus, or Trivy and vulnerability databases such as NVD.
- Familiarity with at least one of AWS, Azure, or GCP, as well as Kubernetes and container technologies.
- Scripting and automation experience in Python, Bash, or a similar language, including APIs and security-tool integrations with ticketing or workflow systems.
- Hands-on experience using AI and LLM tools for security research, vulnerability triage, analytics, automation, documentation, or decision support.
- Ability to validate AI outputs, protect confidential information, follow diagnostic procedures, assess evidence, and communicate remediation recommendations.
- Familiarity with NIST, ISO 27001, FedRAMP, or comparable security frameworks as they relate to vulnerability management.
- Strong analytical, communication, and collaboration skills.
- A Bachelor of Science or Bachelor of Technology degree in Computer Science, Computer Engineering, Electrical Engineering, Electronics and Communication Engineering, or a related field is preferred.
- Basic penetration-testing knowledge is a plus.
- Experience with prompt engineering, Model Context Protocol, or agent frameworks is a plus.
- CEH, CompTIA Security+, or cloud-security certifications are a plus.
- An advanced degree or equivalent practical experience will also be considered.
Benefits
- Comprehensive health coverage, generous paid time off, flexible work options, learning opportunities, career-mobility programs, and leadership workshops.
- Sixteen paid volunteer hours annually, global employee resource groups, a charitable giving program with company match, and a collaborative workplace culture.
- Modern offices with EV charging, healthy snacks, hackathons, game nights, and culture celebrations.
- Bangalore, India location with a hybrid work arrangement.
Tech Stack
Categories
About Infoblox
Infoblox provides DNS, DHCP, and IP address management (DDI) plus DNS security and network automation for large enterprises and service providers. The company sells software and cloud-managed services, with virtual and physical appliances and subscriptions that unify networking and security operations. Founded in 1999 and headquartered in Santa Clara, it is privately held by Vista Equity Partners, and its customers include Fortune 100 firms.