Opportunity at
SwiggyVulnerability Management Engineer
Swiggy seeks a Vulnerability Management Engineer to join its team in Bengaluru for an on-site, full-time position. This role focuses on the day-to-day administration, scanning, and…
Career Tools
About This Role
Swiggy seeks a Vulnerability Management Engineer to join its team in Bengaluru for an on-site, full-time position. This role focuses on the day-to-day administration, scanning, and remediation of security risks across application, network, and system environments. The professional in this position will assess vulnerabilities, support the vulnerability management lifecycle, and collaborate with various departments to prioritize and execute fixes efficiently. Additional responsibilities include offering Level 2 escalation support, analyzing risk…
Job Description
Swiggy seeks a Vulnerability Management Engineer to join its team in Bengaluru for an on-site, full-time position. This role focuses on the day-to-day administration, scanning, and remediation of security risks across application, network, and system environments. The professional in this position will assess vulnerabilities, support the vulnerability management lifecycle, and collaborate with various departments to prioritize and execute fixes efficiently. Additional responsibilities include offering Level 2 escalation support, analyzing risk reports, and recommending security controls to mitigate emerging threats.
This position is suited for cybersecurity professionals with four to six years of experience who possess a strong technical background in operating systems, networking, and security frameworks. Qualified individuals will coordinate remediation efforts with system administrators and network groups while ensuring compliance with internal security guidelines and regulatory standards.
Swiggy operates as an equal opportunity employer, ensuring that all qualified applicants receive consideration without regard to protected characteristics.
Responsibilities
- Execute regular vulnerability scans across applications, networks, and infrastructure utilizing platforms like Qualys, Tenable, and Rapid7.
- Evaluate vulnerability reports to categorize findings, gauge impact, and establish risk priorities.
- Partner with network teams, system administrators, and application owners to deploy patches and configuration updates.
- Track remediation progress and follow up with designated groups to ensure timely fixes, escalating unaddressed issues when necessary.
- Assist the incident response team in investigating security incidents related to known vulnerabilities.
- Monitor emerging threats and provide recommendations for security improvements and risk mitigation.
- Ensure alignment with regulatory standards such as PCI-DSS and SOX, along with internal policies.
- Document vulnerability activities, risk assessments, and scan outcomes while generating stakeholder reports.
- Automate scanning and reporting workflows to increase efficiency and decrease manual workload.
- Deliver Level 2 escalation support for complex issues and collaborate with senior staff on advanced troubleshooting.
Requirements
- Possess four to six years of professional experience within cybersecurity, vulnerability management, or a related domain.
- Demonstrate hands-on experience using vulnerability scanning applications such as Qualys, Tenable, or Rapid7.
- Showcase experience in collaborating with cross-functional departments to drive remediation tasks.
- Understand multiple operating systems including Windows, Linux, and Unix.
- Maintain a strong grasp of networking components like firewalls, routers, and switches.
- Apply analytical problem-solving skills to evaluate risk and create remediation strategies.
- Communicate effectively with both technical and non-technical personnel.
Qualifications
- Familiarity with scripting languages such as PowerShell, Python, or Bash.
- Knowledge of security standards and frameworks including NIST, ISO 27001, and CIS Controls.
- Acquaintance with ITIL and incident management processes.
- Possession of CompTIA Security+, CISSP, CEH, or GCIH certifications.
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location and work arrangement for this role?
The position is located in Bengaluru and is performed on-site.
What is the required years of experience?
Candidates must have four to six years of experience in cybersecurity, vulnerability management, or a related field.
What salary does Swiggy offer for this position?
The salary is not specified in the job posting.
Are specific certifications required to apply?
Certifications such as CompTIA Security+, CISSP, CEH, or GCIH are preferred rather than strictly required.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
