VAPT & Red Teaming Analyst

Responsibilities

• Execute regular and ad-hoc vulnerability scans across the enterprise network, applications, and systems using Qualys Vulnerability Management (VMDR) or Tenable.io/Nessus.
• Analyze scan results, prioritize vulnerabilities based on risk, and provide detailed reports to relevant stakeholders.
• Actively participate in the server commissioning process, ensuring all new servers are integrated into the vulnerability management program from day one.
• Perform initial baseline vulnerability assessments on newly provisioned servers before they enter production, identifying and reporting critical security gaps.
• Collaborate with server administrators and project teams to ensure identified vulnerabilities on new servers are remediated or mitigated according to security policies and timelines.
• Verify the secure configuration of new servers against established security baselines and compliance requirements.
• Work closely with IT operations, development, and system owners to facilitate the remediation of identified vulnerabilities.
• Track remediation efforts and re-scan systems to confirm the effectiveness of applied patches and configuration changes.
• Maintain, configure, and optimize vulnerability scanning platforms (Qualys or Tenable) to ensure accurate and comprehensive coverage.
• Develop and refine scanning policies, profiles, and reporting templates.
• Generate comprehensive vulnerability reports, dashboards, and metrics for various audiences, including technical teams and management.
• Maintain accurate documentation of vulnerability assessment processes, findings, and remediation activities.
• - Execute regular and ad-hoc vulnerability scans across the enterprise network, applications, and systems using Qualys Vulnerability Management (VMDR) or Tenable.io/Nessus. - Analyze scan results, prioritize vulnerabilities based on risk, and provide detailed reports to relevant stakeholders. - Actively participate in the server commissioning process, ensuring all new servers are integrated into the vulnerability management program from day one. - Perform initial baseline vulnerability assessments on newly provisioned servers before they enter production, identifying and reporting critical security gaps. - Collaborate with server administrators and project teams to ensure identified vulnerabilities on new servers are remediated or mitigated according to security policies and timelines. - Verify the secure configuration of new servers against established security baselines and compliance requirements. - Work closely with IT operations, development, and system owners to facilitate the remediation of identified vulnerabilities. - Track remediation efforts and re-scan systems to confirm the effectiveness of applied patches and configuration changes. - Maintain, configure, and optimize vulnerability scanning platforms (Qualys or Tenable) to ensure accurate and comprehensive coverage. - Develop and refine scanning policies, profiles, and reporting templates. - Generate comprehensive vulnerability reports, dashboards, and metrics for various audiences, including technical teams and management. - Maintain accurate documentation of vulnerability assessment processes, findings, and remediation activities.