Senior Information Security Engineer Consultant (Vulnerability Management)

About the role

Optum, part of UnitedHealth Group, is hiring a Senior Information Security Engineer Consultant in Bangalore. The role supports customer and contractual security obligations related to vulnerability management, acting as a liaison between security teams, application owners, infrastructure teams and customer-facing stakeholders so that vulnerabilities are tracked, remediated within required service levels and documented for internal governance and external reporting.

Key responsibilities

• Track vulnerabilities from discovery through remediation and closure, monitor progress against SLAs, contractual and regulatory requirements, review exception requests and escalate overdue items
• Interpret customer security requirements, keep remediation up to date and support customer security reviews, audits, assessments and questionnaires
• Maintain detailed remediation records, executive and customer reports, and audit-ready documentation; create and update procedures and standards
• Produce recurring vulnerability reports and dashboards, track SLA performance and aging vulnerabilities, and support KRI/KPI reporting
• Work with application, infrastructure, engineering and operations teams, and with Security Operations, Risk Management and Compliance

Required profile

• 3+ years in information security, vulnerability management, risk management, compliance or security operations
• Experience supporting customer security reviews and audit responses, and with enterprise vulnerability remediation programs
• Preferred: Bachelor's degree in Information Security, Cybersecurity, Computer Science or Information Systems
• Preferred certifications: Security+, CySA+, CISSP, CISM, GSEC, GIAC Vulnerability Management, CRISC

Required skills

• Vulnerability management lifecycle, CVSS scoring, CVE, DAST, SAST, SCA, penetration testing and patch management
• Platforms such as Tenable, Qualys, Rapid7, Microsoft Defender, Prisma Cloud, GitHub Advanced Security, ServiceNow Vulnerability Response
• Knowledge of HITRUST, HIPAA, NIST CSF, NIST 800-53, ISO 27001, SOC 2 and third-party risk management
• Technical writing, executive reporting, audit evidence collection and stakeholder communication