Skip to main content
Posted 14 June, 2026

Vulnerability management

ClifyX
Bangalore,India,678956 Full Time
Reference: 365_594563_26-06123

Core Responsibilities
• Vulnerability Lifecycle Management: Operate vulnerability scanning tools to detect risks, analyze impact, prioritize threats, and track remediation metrics.
• Risk Prioritization: Analyze vulnerabilities based on severity, exploitability, and business impact using risk frameworks like the Common Vulnerability Scoring System (CVSS)
• Windows & AD Hardening: Remediate operating system vulnerabilities, configure Group Policy Objects (GPOs), and fix Active Directory security flaws and weak protocols.
• Linux Patching & Remediation: Apply security patches, update packages, and perform system hardening across enterprise Linux environments via command-line.
• SSL/TLS & PKI Management: Identify and remediate weak cryptographic ciphers, expired certificates, and misconfigured public/private key infrastructure.
• Collaboration & Remediation: Work closely with system administrators, developers, and IT operations teams to provide technical guidance and verify the implementation of patches and security controls
Required Technical Skills
• Vulnerability Tooling: Hands-on experience interpreting and managing scans from enterprise platforms (e.g., Qualys, Tenable/Nessus, Rapid7 InsightVM).
• Windows Server Administration: Strong expertise in Windows Server (2016/2019/2022), system registries, patch deployment, and event log troubleshooting.
• Active Directory (AD): Deep understanding of AD structures, domain controller security, Kerberos/NTLM hardening, and identity access management.
• Linux Systems Administration: Command-line proficiency in enterprise distributions (RHEL, Ubuntu, CentOS) with experience in package managers (yum/apt) and configuration files.
• SSL/TLS & Certificates: Solid understanding of asymmetric encryption, certificate signing requests (CSRs), certificate authorities (CAs), and secure protocol configurations.
Preferred Qualifications
• Experience using automation tools or scripting languages (PowerShell, Bash, or Ansible) to deploy bulk remediation fixes.
• Relevant industry certifications: CompTIA Security+, CEH, Microsoft Certified: Windows Server Hybrid Administrator, or Red Hat Certified System Administrator (RHCSA).

Sign up for Job Alerts