Qualys / Vulnerability

Apply now »

Date: Aug 1, 2020

Location: IN

Company: Larsen & Toubro Infotech Ltd

"• VM – (Qualys/Nessus/Burp Suit) a. Update and maintain asset database in collaboration with Carrier VM, Infrastructure , Applications & Operations team b. Conducting Asset Discovery Scans, Asset Grouping, Asset Tagging for newly identified assets, put them in scope of VM scan & support CMDB Sync. LTI will also establish automated dynamic discovery of assets by leveraging Armis. c. Identify and maintain asset owners across sites in collaboration with Carrier VM Team d. Perform Vulnerability Scanning, Monitoring & Reporting as per defined frequency e. Perform False Positive analysis & removal f. Vulnerability Risk Prioritization Reporting. Once the Nopsec tool is procured, the same will be done by leveraging Nopsec tool (post the integration of Nopsec with Qualys) g. Create tickets in ServiceNow for VM remediation/mitigation efforts h. Vulnerability Exploitability & Remediation Guidance to the Respective Teams i. Creation of Patch Advisories and publish to the Respective Teams j. Security Patch Testing Report for critical vulnerabilities k. Vulnerability mitigation tracking of ServiceNow tickets to completion by continuous follow up to ensure that Vulnerabilities will be remediated by respective stakeholders l. Reconfirmation of Vulnerability mitigation and closure m. Vulnerability Trend Analysis & Suggestions for continuous improvement n. Custom dashboards, metrics and reports as per agreed format on a daily, weekly, monthly and quarterly basis to meet Carrier executive level needs. Reports will include the following, however not limited to: • Mean time to remediate • Average number of vulnerabilities by asset groups • Average number of vulnerabilities by region based on severity • Top Vulnerabilities o. Enhance/Maintain SOPs on a regular basis p. Performing Ad-Hoc Vulnerability Scans twice a week q. Perform the Root Cause Analysis of the Complex Issues related to the tools, False positives removal, Vulnerability Remediation guidance to Stake Holders as an SME r. Scan specifically for critical vulnerabilities that are part of Emergency Patch Deployments (EPD) daily until 100 percent patched s. Test Emergency patches in the test environment provided by Carrier t. Creation of Patch Advisories & Publish to the Teams u. Vulnerability co-relation, Prioritization using NopSec Tool ( once it is integrated with Qualys) & Short term/Medium & Long-term Remediation Strategy v. Preparation of Vulnerability Metrics at Organization Level to present to Carrier Leadership. Develop custom dashboards, metrics and reports to meet Carrier executive level needs w. Monitoring the Performance of the overall Vulnerability Management Program at Carrier"

Job Segment: Database, Technology