vulnerability management specialist

<div></div><div><div><div><div><ul><div>3 - 5 Years</div>
<div></div><div>2 Openings</div>
 <div>Kochi</div></ul></div><p></p><div><br>
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader"><b>Role description</b></h3>
<div><p>As a key member of the Endpoint Security team, the candidate will support daily operations related to endpoint security and vulnerability management. The role requires a motivated individual with strong coordination, analytical, and communication skills to manage reconciliations, incident tracking, and cross-functional collaboration. The candidate will ensure effective security controls, compliance, and hygiene are maintained across the organization.</p>
<h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3>
<ul>
<li><p>Perform daily operations for endpoint security and vulnerability management, including system reconciliations, compliance monitoring, hygiene tracking, and report generation.</p>
</li>
<li><p>Support the administration, monitoring, and maintenance of endpoint security tools and associated platforms.</p>
</li>
<li><p>Execute routine operational tasks such as policy validation, configuration checks, and system health monitoring.</p>
</li>
<li><p>Collaborate with internal teams (Technology, Service Management, Risk &amp; Audit, Application Owners, Platform Support) to track and resolve incidents, service requests, and change tickets.</p>
</li>
<li><p>Conduct regular asset and vulnerability reconciliations, highlighting discrepancies and initiating resolution through appropriate channels.</p>
</li>
<li><p>Maintain documentation, create knowledge base articles, and contribute to process and training materials.</p>
</li>
<li><p>Validate operational metrics related to cyber hygiene and vulnerability management.</p>
</li>
<li><p>Escalate critical issues promptly and track them through to closure.</p>
</li>
</ul><h3 class="jobSectionHeader"><b>General and Technical Skills</b></h3>
<ul>
<li><p>Strong coordination, organizational, and multitasking abilities.</p>
</li>
<li><p>Minimum 1 year of experience in IT, technology operations, or networking.</p>
</li>
<li><p>Excellent written and verbal communication skills.</p>
</li>
<li><p>Analytical problem-solving skills with attention to detail and thorough documentation.</p>
</li>
<li><p>Proficiency with Microsoft Office tools, particularly Excel for data analysis and reporting.</p>
</li>
<li><p>Working knowledge of Active Directory and basic networking concepts.</p>
</li>
<li><p>Collaborative mindset with the ability to share knowledge and train peers.</p>
</li>
</ul><h3 class="jobSectionHeader"><b>Specialized Technical Skills (Preferred)</b></h3>
<ul>
<li><p>Familiarity with IT service management tools (e.g., ServiceNow, Remedy, Jira Service Desk).</p>
</li>
<li><p>Awareness of vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7).</p>
</li>
<li><p>Understanding of endpoint security technologies, compliance reporting, and operational metrics.</p>
</li>
<li><p>Experience in documenting and improving operational processes.</p>
</li>
<li><p>Basic ability to write or interpret SQL or KQL queries for data analysis and reporting.</p>
</li>
<li><p>Applied knowledge of asset management and reconciliation processes in security domains.</p>
</li>
<li><p>Familiarity with antivirus/antimalware tools and compliance best practices.</p>
</li>
</ul></div><h3 class="jobSectionHeader"><b>Skills</b></h3>
<div><p>Networking,Microsoft Office,Information Technology</p></div></div></div></div><p></p>
<br><div><h3 class="jobSectionHeader"><b>About UST</b></h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

Endpoint Security & Vulnerability Management Analyst

Swan Global WLL

<p><b>Total experience required: minimum 10years</b></p><p><b>Education Required: Technical degrees (Computer science, Engineering, Mathematics, cybersecurity etc). </b></p><p><b>The role requires a Security Engineer who has experience in security operations, threat hunting, vulnerability management and pen testing. </b></p><p>Job Types: Full-time, Contract<br/>Contract length: 3 months</p><p>Application Question(s):</p><ul><li>Do you hold free visa?</li></ul>

SECURITY ENGINEER

Agoda

<div>
 <strong>
  About Agoda
  <br/>
  <br/>
 </strong>
 Agoda is an online travel booking platform for accommodations, flights, and more. We build and deploy cutting-edge technology that connects travelers with a global network of 4.7M hotels and holiday properties worldwide, plus flights, activities, and more. Based in Asia and part of Booking Holdings, our 7,100+ employees representing 95+ nationalities in 27 markets foster a work environment rich in diversity, creativity, and collaboration. We innovate through a culture of experimentation and ownership, enhancing the ability for our customers to experience the world.
 <br/>
 <br/>
 <strong>
  Our Purpose -
 </strong>
 <strong>
  Bridging the World Through Travel
  <br/>
  <br/>
 </strong>
 We believe travel allows people to enjoy, learn and experience more of the amazing world we live in. It brings individuals and cultures closer together, fostering empathy, understanding and happiness.
 <br/>
 <br/>
 We are a skillful, driven and diverse team from across the globe, united by a passion to make an impact. Harnessing our innovative technologies and strong partnerships, we aim to make travel easy and rewarding for everyone.
 <br/>
 <br/>
 <strong>
  Get to Know our Team:
 </strong>
 <br/>
 <br/>
 The Security Department oversees security, governance, risk management, and compliance, and security operations for all Agoda. We are vigilant in ensuring there is no breach or vulnerability threatening our company or endangering our employees to keep Agoda safe and protected. Given that the security ecosystem is moving forward at tremendous speed, we like to be early adaptors of recent technology and products. This would be a great challenge for those who want to work with the best technology in a dynamic and advanced environment.
 <br/>
 <br/>
 <strong>
  The Opportunity:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   As a Security Analyst, you will focus on identifying, analyzing, and remediating vulnerabilities across our environment. You will be hands-on with penetr ation testing and vulnerability management, ensuring our systems remain secure and resilient.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  In this Role, you&rsquo;ll get to:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Develop Security Automation Tools to implement solutions at scale.
  </li>
  <li>
   Triage security findings from multiple tools and work with hundreds of teams to get them remediated within the right SLA.
  </li>
  <li>
   Conduct security assessments through code reviews, vulnerability assessments, penetration testing and risk analysis.
  </li>
  <li>
   Research on the negative effects of a vulnerability, from minimizing the impact to altering security controls for future prevention.
  </li>
  <li>
   Identify potential threats so that the organization can protect itself from malicious hackers. This includes Vulnerability Management, Bug Bounty Program, Penetration Testing.
  </li>
  <li>
   Be responsible for developing Security Trainings for developers.
  </li>
  <li>
   Work with DevSecOps team in integration of tools into CI/CD, as well as fine-tune the rules and precision.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What you'll Need to Succeed:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5+ years in the information security field
  </li>
  <li>
   5+ years of experience with Penetration Testing (Web, Infra, Mobile, APIs etc.) and Vulnerability Management
  </li>
  <li>
   Minimum 1 year of experience running a bug bounty platform
  </li>
  <li>
   Minimum 2years of experience with any of public/private cloud environments (Openshift, Rancher, K8s, AWS, GCP, Azure, etc.)
  </li>
  <li>
   Experience performing security testing, e.g. code review and web application security testing.
  </li>
  <li>
   Familiarity with Gitlab, Defectdojo, JIRA, Confluence.
  </li>
  <li>
   Proficient in one or more programming languages such as Python, Go, Node.js, Python etc.
  </li>
  <li>
   Familiar with analytics platform and databases such as GraphQL , REST APIs, Postgres, MSSQL, Kafka, Hadoop, S3 etc.
  </li>
  <li>
   Strong knowledge of Security Assessment tools such as security scanners (Nessus, Acunetix and similar platforms) and fuzzers.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  It's great if you have:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Knowledge in Container Image Security, Dependency Checking, Fuzzing and License Scanning
  </li>
  <li>
   Familiarity with security incident response processes and 0-days
  </li>
  <li>
   Security Certifications
  </li>
  <li>
   Relocation package is provided in case you prefer to relocate to Bangkok, Thailand. Our benefits are...
  </li>
  <li>
   Hybrid Working Model
  </li>
  <li>
   WFH Set Up Allowance
  </li>
  <li>
   30 Days of Remote Working from anywhere globally every year
  </li>
  <li>
   Employee discount for accommodation globally
  </li>
  <li>
   Global team of 90+ nationalities
  </li>
  <li>
   40+ offices and 25+ countries
  </li>
  <li>
   Annual CSR / Volunteer Time off
  </li>
  <li>
   Benevity Subscription for employee donations
  </li>
  <li>
   Volunteering opportunities globally
  </li>
  <li>
   Free Headspace subscription
  </li>
  <li>
   Free Odilo &amp; Udemy subscriptions
  </li>
  <li>
   Access to Employee Assistance Program (third party for personal and workplace support)
  </li>
  <li>
   Enhanced Parental Leave
  </li>
  <li>
   Life, TPD &amp; Accident Insurance
   <br/>
   <br/>
  </li>
 </ul>
 #bangalore #kolkata #singapore #riyadh #jeddah #medina #madrid #barcelona #london #edinburgh #paris #toronto #telaviv #saopaolo #melbourne #cairo #dubai #abudhabi #sharjah #chicago #newyork #sydney #bucharest #mumbai #newdelhi #pune #dublin #berlin #sanjose #moscow #saintpetersburg #munich #cairo #alexandria #giza #shanghai #beijing #shenzhen #IT #4
 <br/>
 <br/>
 #
 <br/>
 <br/>
 <strong>
  Discover More About Working At Agoda
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Agoda Careers https://careersatagoda.com
  </li>
  <li>
   Facebook https://www.facebook.com/agodacareers/
  </li>
  <li>
   LinkedIn https://www.linkedin.com/company/agoda
  </li>
  <li>
   YouTube https://www.youtube.com/agodalife
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Equal Opportunity Employer
  <br/>
  <br/>
 </strong>
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 <br/>
 <br/>
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 <br/>
 <br/>
 <strong>
  Disclaimer
  <br/>
  <br/>
 </strong>
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 <br/>
 <br/>
</div>


Senior/Staff Application Security Analyst (Bangkok based, relocation provided)

AL GHAITH TECHNICAL SERVICES

<p>Penetration Tester / Vulnerability Analyst &ndash; LLM Security Focus</p><p>Role Overview:</p><p>We&rsquo;re looking for a skilled Pen Tester &amp; VA Specialist with experience in AI / LLM system testing. You&rsquo;ll perform security assessments across web, API, cloud, and AI environments &mdash; focusing on prompt injection, guardrail bypass, model extraction, and Zero-Trust validation for enterprise and government clients.</p><p>Key Responsibilities:</p><p>Conduct web, API, and infrastructure vulnerability assessments &amp; penetration tests.</p><p>Test LLM applications for prompt injection, data leakage, and model theft.</p><p>Use tools like Burp Suite, Trivy, PromptFoo, Garak, NeMo Guardrails, Presidio.</p><p>Produce technical reports and recommend mitigations aligned with ISO 27001 / PDPL.</p><p>Collaborate with DevOps and SOC teams for continuous assurance.</p><p>Qualifications:</p><p>3&ndash;5 yrs in PenTesting / VA or AI Security.</p><p>Strong knowledge of OWASP LLM Top 10, CVSS, MITRE ATT&amp;CK.</p><p>Preferred: OSCP / CEH / AI Security certifications.</p><p>Scripting in Python / Bash is a plus.</p><p>Job Type: Full-time</p>

Cyber security engineer

Equinox Technologies

<div> <p> <strong>Applications invited from experienced candidates for the post of Senior Technical Specialist   Cybersecurity. </strong> </p> <p>Candidates with minimum 5+ years  experience covering security areas like external appliance, end point protection, operating systems, cloud systems, knowledge of managing multiple sites having experience executed DLP plans and vulnerability management software tool preferred. Industry certifications desirable   CISM, CISSP or CISA, Global Information Assurance Certification.</p> <p>Educational qualification preferred is Bachelors or Masters degree in computer science, Business Administration in Information Technology, or a related discipline.</p> <p> <strong>Responsibilities</strong> </p> <ul> <li>Participate in the design, planning, and implementation of new projects / technologies.</li> <li>Daily monitoring and administration of deployed security infrastructure tools, as per the requirement.</li> <li>Conduct penetration testing, vulnerability assessment over infrastructure and applications to identify existing vulnerabilities, prepare report with remediation plans, and follow-up with relevant team until closure.</li> <li>Monitor security logs for all the critical infrastructure systems to identify potential threats, vulnerabilities and indicators of compromise, and report anomalies to the management.</li> <li>Create and maintain threat modelling documentation for the systems and application being used by the organization.</li> <li>Conducting technical security awareness sessions for the IT and other technical teams as required.</li> <li>Develop cybersecurity awareness posters, wallpapers, screensavers, newsletters, advisories, etc. as and when required.</li> <li>Managing complete information security incident management framework.</li> <li>Monitoring and management of overall information security incidents, analysis, containment, response, remediation and post-incident analysis.</li> <li>Provide operational support including responding to incidents, service requests and develop, update, and implement security measures and controls.</li> <li>Secure digital files and information systems, protecting them from unauthorized access or tampering.</li> <li>Provide technical support and monitor security access and perform regular internal and external security audits.</li> <li>Design intruder detection and prevention systems to prevent network invasion.</li> <li>Analyze the source of security breaches, recommend and implement security tools and anti-malware software.</li> <li>Determine, adapt, and maintain corporate security procedures and policies.</li> </ul> <p>Interested candidates please fill in the form on the page and submit your latest updated CV with the post applied for our review.</p></div>

Specialist - Cyber Security

Lendo

<div><p>As Lendo continues to strengthen its security framework, we&rsquo;re seeking an IT Security Specialist to bridge the gap between our Cybersecurity and IT teams. In this role, you&rsquo;ll ensure the secure deployment, maintenance, and monitoring of security tools across all systems and assets. You&rsquo;ll manage endpoint protection, access controls, patch management, and incident response in line with SAMA regulations, driving continuous improvement in our overall security posture. Additionally, you&rsquo;ll play a key role in supporting business continuity and disaster recovery plans, ensuring IT governance remains aligned with cybersecurity standards and best practices.</p><p><b><br>
Key Responsibilities:</b></p><p></p><ul><li><p>
Deploy, configure, and maintain security tools (EDR, antivirus, vulnerability scanners) across all endpoints and cloud assets, ensuring full coverage and effectiveness.</p></li><li><p>
Conduct regular health checks, audits, and assessments of security tools and infrastructure to proactively identify and remediate gaps.</p></li><li><p>
Actively participate in incident response activities, coordinating with Cybersecurity teams to contain, analyze, and recover from security events.</p></li><li><p>
Support business continuity management (BCM) and disaster recovery (DR) initiatives, including planning, testing, and documentation.</p></li><li><p>
Serve as a first point of contact for security-related IT helpdesk tasks, triaging issues and escalating as appropriate.</p></li><li><p>
Manage patch management processes to ensure timely and secure deployment of software and firmware updates organization-wide.</p></li><li><p>
Implement, monitor, and maintain identity and access management (IAM) controls consistent with company policies and regulatory requirements.</p></li><li><p>
Collaborate cross-functionally to align IT governance with cybersecurity frameworks such as the SAMA Cyber Security Framework.</p></li><li><p>
Maintain up-to-date knowledge of evolving threats, vulnerabilities, and compliance mandates, recommending enhancements to improve risk posture.</p></li><li><p>
Provide security awareness guidance and training support for IT staff and end-users.</p></li></ul><p></p><p><b>
Qualifications:</b></p><p></p><ul><li><p>
Bachelor&rsquo;s degree in Computer Science, Information Security, Cybersecurity, or related field.</p></li><li><p>
1-2+ years&rsquo; experience in IT security operations or security engineering.</p></li></ul><ul><li><p>
Proven ability to work collaboratively between IT and Cybersecurity teams to drive security initiatives and operational excellence.</p></li><li><p>
Proven ability to work collaboratively between IT and Cybersecurity teams to drive security initiatives and operational excellence.</p></li><li><p>
Relevant certifications such as Security+.</p></li></ul><p></p><p><b><br>
 Technical Skills:</b></p><p></p><ul><li><p>
Proficiency in deploying and managing endpoint security solutions (EDR, antivirus, vulnerability management).</p></li><li><p>
Experience with patch management tools and automation processes.</p></li><li><p>
Solid knowledge of identity and access management (IAM) solutions and practices.</p></li><li><p>
Basic scripting and automation skills (PowerShell, Python) to support operational efficiency.</p></li></ul></div>

IT Security Specialist

StoneX Group

<div>Overview:
<div>
Connecting clients to markets &ndash; and talent to opportunity with 4,300 employees and over 400,000 retail and institutional clients from more than 80 offices spread across five continents, we&rsquo;re a Fortune-100, Nasdaq-listed provider, connecting clients to the global markets &ndash; focusing on innovation, human connection, and providing world-class products and services to all types of investors.</div><div>
Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, The StoneX Group is made up of four segments that offer endless potential for progression and growth.</div><div></div><div><br>
As a Vulnerability Management Senior Analyst, you will be responsible for supporting a new Vulnerability Management function at StoneX. You will work closely with the Vulnerability Management Manager to identify, assess risks, and monitor security vulnerabilities within SNEX's information technology infrastructure and systems.</div><div></div><div><br>
This is an individual contributor hybrid position that requires 4 days in the office per week. If your resume doesn&rsquo;t perfectly line up with the role responsibilities and qualifications, we encourage you to apply anyway. You could be one step away from work that will transform your life and career.</div>
Responsibilities:
<div><b>
Key Responsibilities:</b></div><ul><li>
Conduct detailed vulnerability assessments to identify, analyze, potential vulnerabilities in software, hardware, and network systems looking at the collected data.</li><li>
Develop and implement comprehensive strategies to evaluate the security of critical systems and infrastructure.</li><li>
Coordinate with the teams responsible for patching to ensure Critical updates are process timely</li><li>
Analyze and respond to Vulnerability incidents and respond with effective mitigation techniques and root cause analysis.</li><li>
Collaborate with IT and network teams to enhance the overall security posture of the organization through strategic improvements and updates.</li><li>
Provide technical guidance and training to team members and other departments on Vulnerability Management practices and processes.</li><li>
Basic knowledge of MITRE ATT&amp;CK so that can understand when engaging with SOC on potential vulnerabilities and how they interact with MITRE.</li><li>
Stay updated with the latest security threats, technologies, and trends to continuously improve the security measures.</li><li>
Prepare detailed reports and presentations for both technical and non-technical audiences, outlining security issues, mitigation plans, and ongoing project results.</li><li>
Document, prioritize and formally report asset and vulnerability state, along with remediation recommendations and validation.</li><li>
Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging</li></ul><div></div><div><b><br>
This job might be for you if:</b></div><div><ul><li>
You enjoy learning about cyber security, threats and vulnerability and proactively protecting an organization.</li><li>
You love taking on difficult challenges, finding creative solutions, and stepping outside your comfort zone to learn and grow.</li><li>
You do not get flustered easily. If you do not know the answer, you will use the available resources to try to find the answer first.</li><li>
You enjoy working on a team or individually to fulfill a mission.</li><li>
You are fluent in English.</li><li>
You possess excellent verbal and writing skills.</li><li>
You enjoy reading, research, and writing.</li><li>
You have a radical curiosity.</li><li>
You are motivated and driven. You volunteer for new challenges without waiting to be asked.</li></ul></div>
Qualifications:
<p><b>
To land this role:</b></p><p>
You need to exhibit a high degree of emotional intelligence, empathy, and the ability to learn quickly. The ability to write well is a requirement of this job.</p><p></p><p><b><br>
Qualifications:</b></p><ul><li>
Bachelor's degree in computer science/information technology/Cybersecurity, or a related field or equivalent experience</li><li>
Minimum of 4-6 years of experience in cybersecurity, specifically in vulnerability assessments and penetration testing.</li><li>
Relevant certifications such as CompTIA Security+ and Certified Vulnerability Assessor or equivalent VAPT certifications.</li><li>
Proven expertise in using a variety of security testing tools and software. VM tools like Rapid7 Insight VM, Qualys, Tenable etc.</li><li>
Excellent problem-solving and analytical skills and critical thinking</li><li>
Strong communication skills, both written and verbal, with the ability to produce clear and concise reports.</li><li>
Ability to work independently and as part of a team in a fast-paced, high-pressure environment.</li><li>
Commitment to training, self-study and maintaining proficiency in the Vulnerability Management domain.</li></ul><p></p><p><b><br>
Preferred Qualifications</b></p><ul><li>
Experience in Incident Response, Vulnerability Management, Security Operations</li><li>
Good Business communication skills, both written and verbal, as this job requires to coordinate with various Stakeholders</li><li>
Excellent Logical and Critical thinking. Need to be Analytical.</li></ul><p></p><p><b><br>
Working environment:</b></p><br>
<p></p><ul><li>
Hybrid, 4 days mandatory from office</li><li>
Travel Requirements (if applicable)</li></ul></div><div></div>

IT Vulnerability Management Analyst I

Search 10000+ Vulnerability management specialist jobs near you this October. New roles added regularly across leading industries. Apply today.