Senior SME - VA & PT

Skills Required:- Vulnerability assessment and management, tools and technologies: Microsoft defender vulnerability management + Nessus

MDE + MDVM + Nessus

Job Description – Vulnerability Management Specialist

Position Overview

We are seeking an experienced Vulnerability Management Specialist to lead the identification, assessment, prioritization, and remediation of security vulnerabilities across enterprise environments. The role will focus on managing and optimizing vulnerability detection platforms including Microsoft Defender for Vulnerability Management (MDVM), Nessus, and AppCheck, while collaborating with infrastructure, application, and security teams to reduce risk and strengthen the overall security posture.

Key Responsibilities

Vulnerability Management

• Administer and maintain vulnerability scanning platforms (MDVM, Nessus, AppCheck) to ensure accurate, reliable, and timely vulnerability data.
• Perform regular vulnerability scans on endpoints, servers, applications, and cloud workloads.
• Validate scan results, eliminate false positives, and ensure findings are accurate and actionable.
• Prioritize vulnerabilities based on exploitability, risk to business assets, and threat intelligence context.
• Track remediation progress and work with IT/DevOps teams to ensure timely patching and configuration fixes.
• Generate vulnerability and risk metrics for leadership reporting.

Microsoft Defender for Vulnerability Management (MDVM)

• Configure and tune MDVM dashboards, vulnerability baselines, and alerts.
• Perform endpoint and device risk assessment using MDVM insights.
• Integrate MDVM findings into Microsoft Sentinel / XDR workflows for end-to-end visibility.
• Collaborate with endpoint security teams to remediate vulnerabilities via Intune/Configuration Manager.

Nessus

• Manage Nessus scanning policies and schedules across diverse environments (on-prem, hybrid, cloud).
• Conduct authenticated and unauthenticated scans, validate coverage, and identify missing assets.
• Analyze Nessus reports for OS, middleware, and network device vulnerabilities.
• Provide remediation recommendations for patching, configuration hardening, or compensating controls.

AppCheck

• Perform dynamic application security testing (DAST) using AppCheck for web applications and APIs.
• Identify vulnerabilities such as injection flaws, misconfigurations, authentication/authorization weaknesses, and insecure coding practices.
• Work closely with development teams to remediate issues following secure SDLC principles.
• Provide input into DevSecOps pipelines by integrating AppCheck scans into CI/CD processes.

Created On

02-Sep-2026