Hiring experienced Cybersecurity Compliance & Vulnerability Management Engineer with 10+ years of experience in cybersecurity compliance, vulnerability management, platform security, and risk assessment. The ideal candidate should have hands-on experience with ISO 27001, NIST, SOC2, GDPR, vulnerability scanning tools, and secure-by-design implementation practices.

About the Role

RedandBlue Applied Innovations is looking for a highly skilled Cybersecurity Compliance & Vulnerability Management Engineer to support enterprise security, compliance initiatives, platform security reviews, and vulnerability management activities across cloud, on-prem, and hybrid environments.

The candidate will work closely with engineering, platform, infrastructure, and security teams to ensure compliance with cybersecurity standards and proactively identify and remediate vulnerabilities.

Experience

• 10+ Years

Location

• India (Hybrid / Remote)

Key Responsibilities

• Conduct cybersecurity compliance assessments across systems, applications, and platforms
• Support internal and external audits and maintain compliance evidence repositories
• Manage the full vulnerability management lifecycle including:
  • Discovery
  • Classification
  • Prioritization
  • Remediation
  • Verification
• Perform vulnerability scans using tools such as:
  • Tenable
  • Qualys
  • Rapid7
  • Microsoft Defender
  • Similar enterprise security tools
• Collaborate with engineering and platform teams to implement secure-by-design principles
• Assist in threat modeling, platform risk assessments, and security reviews
• Track remediation activities and provide executive and technical vulnerability reports
• Ensure adherence to cybersecurity frameworks, standards, and best practices

Required Skills

• Strong understanding of:
  • ISO 27001
  • NIST
  • CIS Controls
  • GDPR
  • SOC2
• Hands-on experience in vulnerability management and risk assessment
• Knowledge of platform security and security controls
• Strong documentation, reporting, and analytical skills
• Ability to communicate technical risks effectively to both technical and leadership teams

Preferred Certifications

• CISSP
• CISM
• Security+
• CEH
• ISO 27001 Lead Auditor / Implementer
• AZ-500
• CYSA+

Preferred Skills

• Experience with cloud security and hybrid infrastructure environments
• Familiarity with automation or scripting (PowerShell/Python) is a plus
• Experience supporting audit and compliance-driven environments

Apply Now

📩 Send your resume to: ta@redandblue.com
Subject Line: Cybersecurity Compliance Engineer

#CyberSecurity #VulnerabilityManagement #ISO27001 #NIST #SOC2 #Hiring #SecurityEngineer #RedandBlue