Senior Engineer - Threat Exposure Management & CD Business Operations
GSK (company site, opens in a new tab)BengaluruOn-siteDirect career pageEst. 30–45 LPA
Posted 9h ago
Reach people at GSK
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at GSK you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Deliver and manage continuous monitoring and prioritization of GSK's threat exposure including vulnerabilities, attack surface, and configuration drift.
- Operate and maintain exposure and vulnerability tools, ensuring data quality and tracking remediation against service levels.
- Manage Cyber Defense business operations including exception, risk acceptance processes, and build reporting packs with underlying data.
Minimum Requirements
- Degree in a relevant discipline or equivalent related experience.
- Demonstrated experience in vulnerability or exposure management with practical hands-on cyber security skills.
- Working knowledge of risk-based prioritisation of technical findings and ability to deliver high-quality work independently.
- Experience with tools like Qualys, Tenable, Rapid7, ServiceNow, Power BI or similar; certifications such as CISSP, CompTIA Security+, GIAC, or CRISC are preferred but not strictly mandatory.
Ideal Candidate Profile
- Experienced in continuous threat exposure management and enterprise vulnerability and attack surface tooling.
- Comfortable managing complex cyber security data and reporting in a regulated industry such as pharmaceutical or life sciences.
- Able to prioritize remediation efforts effectively using exploitability and business impact rather than only severity scores.