Senior Security Engineer – Vulnerability Management

About the role

We are seeking a highly skilled Senior Security Engineer to lead the Vulnerability Management program within Flipkart’s Infosec team. The role covers the full lifecycle of vulnerability discovery, assessment, prioritisation and remediation governance across cloud, network and endpoint environments.

Key responsibilities

• Proactively identify security weaknesses across network infrastructure, cloud services and compute assets.
• Lead remediation governance to ensure vulnerabilities are fixed within SLA.
• Collaborate with IT operations and business owners to track, validate and oversee patch management.
• Analyse vulnerability data to provide risk‑based prioritisation beyond CVSS scores.
• Design and deliver dashboards and compliance reports for technical teams and senior leadership.
• Use External Attack Surface Management tools to discover and assess internet‑facing shadow‑IT assets.
• Lead technical response and blast‑radius assessment for high‑profile zero‑day events.
• Own deployment, configuration and tuning of enterprise VA tools such as Tenable/Nessus, Qualys, Rapid7 and ManageEngine.
• Develop automation scripts (Python, PowerShell, Bash) and API integrations for scan scheduling, data extraction, ticketing and reporting.
• Evaluate and implement AI‑based vulnerability assessment and predictive patch‑management solutions.
• Establish and maintain secure configuration baselines for endpoints (Windows, macOS, Linux) and network devices.

Required profile

• Minimum 5 years of hands‑on experience in vulnerability assessment and remediation governance.
• Proven expertise managing enterprise‑grade VA tools (Tenable/Nessus, Qualys, Rapid7, ManageEngine).
• Strong scripting or programming skills for automation (Python, PowerShell, Bash).
• Experience with cloud, network and endpoint security environments.
• Ability to translate technical findings into business‑focused risk recommendations.
• Familiarity with AI‑driven security analytics is a plus.

Required skills

• Tenable/Nessus
• Qualys
• Rapid7
• ManageEngine
• Python
• PowerShell
• Bash
• REST APIs
• AI‑based vulnerability assessment tools
• Secure configuration baselines (Windows, macOS, Linux, routers, switches)
• External Attack Surface Management (EASM) tools