Expleo Group

Vulnerability and Patch Manager

Expleo Group
Posted 10/20/2026full-timeChennai • IndiaSeniorLeadWebsite
Apply

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management and patch management processes, utilizing tools such as Rapid7, Tenable, or Qualys. Proficient in producing detailed reports and advisories for both technical and non-technical audiences while coordinating remediation efforts across teams and third-party suppliers.

Highest-signal resume keywords
Vulnerability Management CertificationExperience With Vulnerability Management PlatformsThreat-Informed Prioritisation Using CVSSStrong Reporting And Data AnalysisExperience With Patch Management Processes

Tech Stack

Tools & technologies
Cyber SecurityFirewalls

About the role

Key responsibilities & impact
  • Lead a continuous vulnerability assessment programme using outputs from the client's vulnerability management platform
  • Prioritise vulnerabilities using CVSS, EPSS, CISA KEV, NCSC advisories, and vendor PSIRTs
  • Produce monthly remediation recommendations
  • Issue critical patch advisories, typically within 24 hours
  • Produce monthly reports on vendor patch and firmware releases
  • Produce OS patch and device firmware compliance reports
  • Consolidate patch and upgrade status reporting for firewalls, intrusion prevention, email gateway, secure web gateway, and application control platforms
  • Track intrusion prevention signature compliance against the 48-hour target
  • Maintain the vulnerability exception and risk acceptance register
  • Present risk items for decision through service governance
  • Prepare and co-facilitate monthly vulnerability and patch reviews with the UK Head of Service, client teams, and third-party suppliers
  • Carry out targeted vulnerability analysis supporting incidents and investigations
  • Apply safe practice for operational technology assets where scanning and patching are constrained
  • Support Expleo's Cybersecurity Practice through knowledge sharing and technical contribution
  • Provide designs, analysis, recommendations, and assurance without access to the client's operational systems or data or making live changes

Requirements

What you’ll need
  • Degree in computer science, cybersecurity or a related discipline, or equivalent professional experience
  • Vulnerability management vendor certification, e.g. Rapid7, Tenable or Qualys (at least one required)
  • CompTIA CySA+, PenTest+, GIAC GEVA, or ITIL 4 Foundation advantageous
  • Experience with vulnerability management platforms such as Rapid7 InsightVM, Tenable, or Qualys
  • Experience with patch management processes and tooling such as Intune/MECM, Ivanti, Tanium, or BigFix
  • Threat-informed prioritisation using CVSS, EPSS, CISA KEV, and vendor advisories
  • Experience coordinating remediation across internal teams and third-party suppliers
  • Strong reporting and data analysis using Excel and Power BI
  • Clear, concise written advisories for technical and non-technical audiences
  • OT vulnerability management and safe scanning practice desirable
  • Energy, utilities, or other CNI sector experience desirable
  • Experience supporting NIS or CAF-aligned assurance reporting desirable
  • 8–12 years in IT security or infrastructure, including 4+ years managing vulnerability and patch management programmes
  • Experience running risk exception and acceptance processes through governance
  • Right to work in India
  • Based in, or willing to relocate to, Chennai
  • Willingness to complete enhanced pre-employment background screening and additional client vetting
  • Ability to work hours overlapping with the UK business day, with occasional out-of-hours advisory support during major incidents
  • Excellent written and spoken English
  • Comfortable working within a strict security boundary, with no access to the client's operational systems or data

Benefits

Comp & perks
  • Collaborative working environment
  • Opportunities to expand skills and take part in inspiring projects
  • Expleo Academy accredited training courses
  • Competitive local company benefits
  • Equal opportunities employer

ATS Keywords

✓ Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Vulnerability AssessmentPatch ManagementRisk Exception ManagementData Analysis Using ExcelPower BI ReportingIntrusion Prevention ComplianceVulnerability Exception Register MaintenanceTargeted Vulnerability AnalysisOperational Technology Safe PracticesRemediation Coordination
Soft Skills
Clear Written CommunicationConcise AdvisoriesCollaboration With TeamsFacilitation Skills
Tools & Technologies
Rapid7 InsightVMTenableQualysIntune/MECMIvantiTaniumBigFix
Certifications & Qualifications
Vulnerability Management Vendor CertificationCompTIA CySA+PenTest+GIAC GEVAITIL 4 Foundation
Industry Keywords
Energy SectorUtilities SectorCNI SectorNIS Assurance ReportingCAF-Aligned Assurance Reporting