Vulnerability Management Specialist

About the role

The Vulnerability Management Specialist will be embedded within a major banking client to lead continuous discovery, analysis and tracking of technical vulnerabilities across the bank’s enterprise networks, systems and applications. Working as a key link between automated security detection tools and infrastructure engineering teams, the role ensures that security weaknesses are prioritized and resolved in line with strict SLAs and banking regulatory requirements.

Key responsibilities

• Operate and maintain enterprise vulnerability scanning schedules across infrastructure, networks and endpoints, interpreting data outputs to identify systemic security gaps.
• Analyze detected vulnerabilities using technical threat intelligence and business context to prioritize remediation based on exploitability and potential banking impact.
• Partner with system administrators, infrastructure engineers and application owners to coordinate, track and validate patch management and risk mitigation activities.
• Verify that remediation efforts comply with internal security policies and external banking regulations.
• Generate structured vulnerability metrics, aging reports and technical risk summaries for technical teams and security management.
• Represent DeepLight AI by maintaining high technical accuracy, process consistency and professional accountability in day‑to‑day security operations.

Required profile

• Proven experience in vulnerability assessment and remediation within enterprise environments.
• Strong understanding of banking sector regulatory baselines and security compliance requirements.
• Ability to work closely with infrastructure and application teams to drive timely remediation.
• Excellent analytical skills to translate complex security data into actionable priorities.

Required skills

• Vulnerability scanning and analysis.
• Patch management coordination.
• Risk prioritization based on threat intelligence.
• Compliance monitoring for banking regulations.
• Security reporting and metrics generation.