Vulnerability Management Engineer - Github

Job Description :

BE , BTech , MCA , MTech candidates having 2 to 7 years of work experience as Vulnerability Management Engineer with strong expertise in scripting, GitHub workflows, and modern AI-assisted tools such as GitHub Copilot. The role involves identifying, assessing, and mitigating security vulnerabilities across applications and infrastructure while leveraging automation and secure coding practices.

Key Responsibilities :

- Perform vulnerability assessments and security scans across applications, systems, and repositories.

- Analyze and prioritize vulnerabilities based on severity, risk, and business impact.

- Develop and maintain scripts (Python, PowerShell, Bash, etc.) for automation of security tasks.

- Integrate vulnerability scanning tools with GitHub repositories and CI/CD pipelines.

- Utilize GitHub and GitHub Copilot to enhance secure code development and remediation workflows.

- Collaborate with development and DevOps teams to fix vulnerabilities and enforce secure coding practices.

- Monitor and manage vulnerability lifecycle from identification to closure.

- Conduct code reviews with a focus on security best practices.

- Generate reports and dashboards for vulnerability tracking and compliance.

Required Skills & Qualifications :

- Strong experience in Vulnerability Management and Application Security.

- Proficiency in scripting languages (Python, Bash, PowerShell, or similar) + Ansible (Python or Ansible).

- Hands-on experience with GitHub, including repositories, branching strategies, and GitHub Actions.

- Familiarity with GitHub Copilot or similar AI-assisted coding tools.

- Knowledge of common vulnerabilities (OWASP Top 10, CVEs, etc.).

- Experience with tools like Qualys, Nessus, Snyk, or similar.

- Understanding of CI/CD pipelines and DevSecOps practices.

Should presently be working/designated as follows :

- Vulnerability Management Engineer

- Application Security Engineer

- DevSecOps Engineer

- Security Engineer (AppSec)

- Cyber Security Analyst L2 / L3

- VAPT Consultant

(ref:hirist.tech)