Job Title
Vulnerability Management Engineer (Hybrid)
Job Description
For more than 80 years, Kaplan has been a trailblazer in education and professional advancement. We are a global company at the intersection of education and technology, focused on collaboration, innovation, and creativity to deliver a best in class educational experience and make Kaplan a great place to work.
Our offices in India opened in Bengaluru in 2018. Since then, our team has fueled growth and innovation across the organization, impacting students worldwide. We are eager to grow and expand with skilled professionals like you who use their talent to build solutions, enable effective learning, and improve students’ lives.
The future of education is here and we are eager to work alongside those who want to make a positive impact and inspire change in the world around them.
The Vulnerability Management Engineer role will strengthen the security posture of the KNA organisation by owning the end-to-end vulnerability management lifecycle, from discovery and analysis through remediation and verification. This position will operate and optimise enterprise vulnerability management tools, deliver in-depth remediation analysis that prioritises the risks that matter most, and serve as a key responder during security incidents and actively exploited vulnerabilities. The Vulnerability Management Engineer will partner closely with IT, cloud, and engineering teams to drive measurable reductions in exposure and time to remediate.
Primary Responsibilities:
Administer and optimise enterprise vulnerability management platforms (e.g., Tenable, Qualys, Rapid7, CrowdStrike Falcon Spotlight) across on-premises, cloud, container, and endpoint environments, ensuring complete asset coverage, authenticated scanning, and reliable, current findings.
Perform in-depth vulnerability remediation analysis by validating findings, eliminating false positives, identifying root causes and recurring patterns, and prioritising risk based on exploitability, threat intelligence (e.g., CISA KEV, EPSS), asset criticality, and business impact.
Partner with infrastructure, cloud, application, and endpoint owners to define remediation plans, provide clear technical guidance, and track progress to closure against defined SLAs, escalating overdue or high-risk items to drive measurable reductions in exposure and time to remediate.
Respond to security incidents and actively exploited vulnerabilities (e.g., zero-day events) by triaging alerts, rapidly identifying affected assets, and supporting investigation, containment, eradication, and recovery with the SOC and incident response team. Participate in a rotational on-call schedule that supports follow-the-sun incident coverage with US-based colleagues.
Strengthen incident response readiness by developing and maintaining playbooks and runbooks for vulnerability-driven incidents, participating in tabletop exercises, and leading post-incident reviews that capture lessons learned and drive control improvements.
Develop and maintain dashboards, metrics, and executive reporting (e.g., mean time to remediate, SLA compliance, risk reduction trends, scan coverage) that give security leadership and control owners clear visibility into vulnerability risk.
Automate vulnerability management workflows, such as ticket creation, asset-owner mapping, risk enrichment, and reporting, using scripting and APIs, and integrate vulnerability tools with ITSM, CMDB, SIEM, and EDR platforms to reduce manual effort and accelerate remediation.
Manage the vulnerability exception and risk acceptance process by documenting compensating controls, confirming appropriate approvals, and tracking exceptions through to expiry.
Support audits and compliance activities by providing evidence and reporting for vulnerability and patch management controls aligned to ISO 27001, PCI DSS, SOX, SOC 2, and other relevant standards, and evaluate emerging tools and threat intelligence to continuously…