Senior Security Engineer / Vulnerability Management & Security Infrastructure Lead

Project overview

This contract role leads enterprise vulnerability management, attack surface monitoring, security risk governance, and security infrastructure operations. The core requirements are hands-on expertise with Tenable Nessus, BitSight, and Infoblox DDI, alongside vulnerability prioritization and remediation, third-party risk, DNS security, and security compliance. The role also covers platform lifecycle management, executive risk reporting, operational governance, and automation; no separate nice-to-have skills are identified in the description.

The structured input specifies 9–14 years of experience, while the description itself does not state an experience band. The location is India, but the work mode is not specified.

Responsibilities

• Lead the administration, engineering, and lifecycle management of Tenable Nessus, BitSight, and Infoblox platforms.
• Define and implement enterprise Vulnerability Management and Risk Management strategies aligned with security and compliance objectives.
• Manage large-scale vulnerability assessment programs across on-premises, cloud, network, server, endpoint, and application environments.
• Establish risk-based vulnerability prioritization methodologies and remediation governance processes.
• Drive vulnerability remediation programs by collaborating with Infrastructure, Cloud, Application, Network, and Security Operations teams.
• Develop executive-level dashboards, KPI/KRI metrics, risk scorecards, and remediation tracking reports.
• Oversee cyber risk exposure monitoring and external attack surface assessment using BitSight.
• Assess third-party security posture, cybersecurity ratings, and supplier risk metrics, and provide strategic recommendations to reduce business risk.
• Lead security posture reviews and risk assessments and provide recommendations to senior leadership.
• Architect, administer, and optimize Infoblox DDI (DNS, DHCP, and IP Address Management) infrastructure.
• Ensure high availability, scalability, performance, and security of enterprise DNS and IP management services.
• Implement DNS security controls, network visibility solutions, and operational best practices.

Requirements

• Tenable Nessus platform administration and lifecycle management
• BitSight platform administration and cyber risk exposure monitoring
• Infoblox DDI architecture and administration
• Enterprise vulnerability management
• Risk-based vulnerability prioritization and remediation governance
• Security risk assessment and governance
• External attack surface management
• Third-party risk assessment and security ratings
• DNS, DHCP, and IP address management
• DNS security and network infrastructure security
• Security compliance and regulatory assessments
• Security architecture and engineering
• Security operations and governance
• Security reporting, executive dashboards, and KPI/KRI metrics
• Process automation and continuous improvement

Project details

• Start: flexible
• Remote: hybrid
• Location: India, IN