Responsibilities

• Analyze vulnerability scan results from Qualys and security advisories to identify CVEs across Windows, Linux, Oracle Database, WebLogic, IIS, Apache, and cloud-hosted environments.
• Perform CVSS-based risk assessment using exploitability data, asset criticality, and threat context to prioritize remediation.
• Drive remediation of OS, middleware, database, and application vulnerabilities with infrastructure and application teams to meet remediation SLAs.
• Track vulnerability lifecycle including closure validation, exception handling, and risk acceptance.
• Identify and manage End-of-Life (EOL) technologies and define remediation or migration actions.
• Analyze security logs and events from Splunk, NXLog, Microsoft Defender ATP, and system/application logs to detect anomalies and security issues.
• Investigate incidents such as malware execution, phishing attempts, unauthorized access, and privilege...