Skip to content
Search jobs inside your AI agent. Claude, ChatGPT, Claude Code, Codex, Gemini, Cursor and Grok
Connect

CGI

NewBe an early applicant

Cybersecurity / Risk Management Professional

Posted 6 views
Discussion

Summary

Vulnerability management / security hardening engineer who hardens network devices and Linux/Windows servers to CIS Benchmarks, runs vulnerability scans (Qualys, Rapid7 InsightVM, MicroFocus), triages findings into remediation tickets, and automates fixes with Python, PowerShell, Bash, and Ansible while supporting audit and regulatory compliance.

Position Description:

Job Title: 30272-Cybersecurity, Risk ManagementPosition: Specialist System Engineer Experience: 2.1-5 yearsCategory: Infrastructure /CloudLocation: MumbaiPosition ID: J1026-1465Employment Type: Full-timeJob Summary -We are looking for a Vulnerability Management Security Hardening Engineer with 2-4 years of cybersecurity experience to strengthen the organization's security posture through system hardening, vulnerability assessment, compliance monitoring, and remediation activities. The role focuses on implementing CIS Benchmarks, conducting security assessments across network and server infrastructure, automating security controls, and supporting audit and regulatory compliance initiatives.Responsibilities Direct Responsibilities 1. Deep familiarity with the CIS Controls and CIS Benchmarks for routers, switches, firewalls, IDS/IPS, load balancers, VPN concentrators, etc. 2. Ability to map benchmark recommendations to device-specific configuration commands. 3. Experience producing hardening guides and remediation plans 4. Linux (RHEL, CentOS, Ubuntu) and Windows Server hardening per CIS Benchmarks. 5. Understanding of SELinux/AppArmor, sysctl, group policies, secure baselines. 6. Hands-on use of MicroFocus Automation, Qualys, Rapid7 InsightVM for benchmark compliance checks. 7. Ability to ingest scan results, prioritize findings and produce remediation tickets. 8. Python (paramiko/Netmiko/NAPALM), PowerShell, Bash for bulk configuration review and remediation. 9. Experience with Ansible, Chef, or Puppet for applying hardening templates. Contributing Responsibilities 1. Contribute to the Permanent Control framework for implementation of policies and procedures in day to day business activities, such as Control Plan 2. Contribute to Internal Audit response activities. 3. Comply with regulatory requirements and internal guidelines. 4. Contribute to improvement of tools used by Production Security to follow up on the Security Incidents Technical Behavioral Competencies . OWASP methodologies application is mandatory. . 2 - 4 year experience in IT Security minimum . University degree, preferably in Computer Science with spec. in IT Security . Exceptional communication and advocacy skills, both verbal and written, with the ability to express complex technical issues in an easily understood manner. . Curious and highly implicated in IT Security . Team player . Experience working in an international and complex ficial environment, dealing with both business constraints and IT users across countries. . Experience in a multi cultural environment is appreciated. . CEH or Any Security certifications are appreciated. . Experience in Development languages and scripting is appreciated. Specific Qualifications: Skills Referential (Required knowledge, skills and abilities) Technical Skills: . Vulnerability Management . Network Security . Vulnerability Assessment . Scripting Knowledge Behavioral Skills: . Ability to manage / facilitate a meeting, seminar, committee, training . Business communication . Stakeholder handling . Ability to understand, explain and support change Education Level: Bachelor's degree or equivalent Location: Mumbai#LI-SA2

Skills:
  • Cyber Security Strategy
  • Network Security
  • Risk management
  • Vulnerability assessment(IAVA)
  • Vulnerability management(IAVM)

Skills

Apply

See also

Security jobs by country — openings, pay and top skills →