TETechcom Solutions India Private Limited
AppSec Vulnerability (VOC)
Bangalore ₹20-24 LPA Posted 5 Oct 2026
FULL TIME
Vulnerability Management
Owasp Top 10
VOC
Job Description
- Proven experience in the field of cybersecurity, emphasizing vulnerability management, security operations, or infrastructure security.
- In-depth knowledge of various vulnerability types (including OWASP Top 10, CWE, CVE, misconfigurations, and insecure APIs) and the ability to articulate common attack techniques. A strong foundation in web application security and API security principles is essential.
- Exhibit a robust ability to prioritize vulnerabilities, assessing risk based on exploitability, asset criticality, and business context.
- Enhance the effectiveness and efficiency of DevSecOps vulnerability triage operations.
- Conduct both manual and semi-automated triage of vulnerability findings, leveraging expert judgment on severity, exploitability, and business impact.
- Execute false positive analysis, de-duplication, and normalization of tool outputs.
- Offer technical insights during project releases to ensure triage readiness.
- Identify and correlate recurring vulnerability data across various projects or business units to recognize trends that can simplify or streamline triage processes.
- Effectively collaborate with application teams, DevOps, BISOs, and developers by clearly communicating vulnerabilities and associated risks.
- Engage in security tool Proof of Concept (PoC) and Proof of Value (PoV) processes as well as selection activities.
- Lead the implementation and integration of selected tools into the triage workflow to improve automation, data accuracy, and analyst productivity.
- Design and develop automation workflows for enrichment, de-duplication, and ticketing processes.
- Contribute to strategic planning and ongoing enhancement of Vulnerability Operations Center (VOC) capabilities.
- Create and maintain documentation, including knowledge base entries and playbooks. Keep precise records of analyses, risk decisions, and triage actions.
- Guide developers and application teams in secure coding best practices.