> Markdown version of [/jobs/ext/3907099-vulnerability-assessment-consultant-consultant-specialist-pune-cybersecurity-0000jjv2](https://www.wearedevelopers.com/jobs/ext/3907099-vulnerability-assessment-consultant-consultant-specialist-pune-cybersecurity-0000jjv2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Vulnerability Assessment consultant/ Consultant Specialist/ Pune/ Cybersecurity : 0000JJV2

- **Company:** HSBC Group
- **Location:** United Kingdom
- **Salary:** £44,420
- **Contract:** Permanent contract
- **Skills:** Confluence, Cyber Security, Github, Network Security, Open Web Application Security, Fortify (Software), Microsoft SharePoint, Software Vulnerability Management, Software Security, Patch Management, Nessus, Checkmarx, Appscan, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 25, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5210485220

## About the Role

We are currently seeking an experienced professional to join our team in the role of consultant specialist, To be successful in this role, you should meet the following requirements:

 * The ability to understanding, apply, and improve elements of the Vulnerability Management Lifecycle.
 * The ability to recognize threats and risk, and act with insight to deliver a core part of the Cyber Security Operational model in BANK. Multiple functions will come together to ensure the safety of the bank and the ability to continue business under any circumstances.
 * Understanding and experience in the Assessment and execution of: Vulnerability scanning technologies and their application (e.g. Nessus, SAST/MAST/DAST (Checkmarx, Netsparker, Fortify, IBM AppScan, etc.), Tenable.io, Security Center (or similar Vulnerability Scanning products), risk consolidation platforms).
 * Manual Vulnerability assessments, scoring and ratings and how they are applied.
 * Strong Knowledge of OWASP concepts and CVE, CWE's, Cryptography.
 * A solid understanding of web and networks security.
 * Knowledge of GitHub, Stash.
 * Experience of working in roles within Application Security, Risk Management, and Governance, within a mid to large enterprise or equivalent BFSI organization.
 * Patch Management.
 * SharePoint, Microsoft Teams, and Confluence.
 * Excellent organizational, administrative, analytical, and problem-solving skills with the ability to work accurately and methodically whilst under pressure to meet deadlines.
 * Experience of working in roles within Cyber Security Operations, Risk Management, and Governance, within a mid to large enterprise or equivalent organization.

## Description

* Leading the review of all newly discovered vulnerabilities, to assess if the provided risk score is correctly reflecting the risk to Bank.
 * Monitoring external threat feeds to identify any newly reported external risks.
 * Managing the review of assigned tickets, determining potential false positive and/ or mitigation on approaches, and providing expert guidance/ advice on remediation.
 * Ensuring all patterns identified for remediation and/ or false positive identification, are clearly documented within the central tools and applied across the BANK identified threat estate.
 * Identify critical paths of operation and ensure that they are followed to provide the most streamlined and efficient method of operating.
 * Maintain operational documentation on what reports are available and how to access and utilize existing filters.
 * Conduct holistic reviews of the overall baseline security posture.
 * Clear accountability and ownership of the Vulnerability Assessment and Response key control indicators and key risk indicators.
 * Contribute to and inform requests from Regulators, Internal/ External Audit,
 * Supporting the commentary for routine governance submissions e.g., Cybersecurity Executive Committee Monthly Update, Risk Map, KCIs, KRIs.
 * Supporting Imminent threat review sessions and deputizing for the chair when required.
 * Engaging with the Global Head of Vulnerability Management, and relevant team members to review and gain approval for submissions and ensure information requests are aligned with the group risk appetite providing the expected responses.