Prabhas B

Vulnerability Management Analyst

Bengaluru, INDIA 2+ yrs exp 89 · Excellent

About

Vulnerability Management Analyst with over 2 years of enterprise security experience supporting large-scale IT environments at HCL Technologies. Specializes in vulnerability analysis, security configuration assessments, and CIS benchmark implementation across on-prem and cloud infrastructure, including Microsoft Azure. Proven expertise in Qualys VMDR, misconfiguration management, risk-based remediation, and ServiceNow-driven SLA tracking. Demonstrated success in securing 10,000+ CMDB assets, maintaining 90%+ compliance, and improving remediation timelines through automation and cross-team coordination.

Skills & Expertise (16)

Vulnerability Scanning Advanced

8.0/10

Years Exp

Qualys Advanced

8.0/10

Years Exp

CIS Intermediate

7.4/10

Years Exp

Endpoint Security Intermediate

7.0/10

Years Exp

Configuration Assessment Intermediate

7.0/10

Years Exp

Azure Security Intermediate

7.0/10

Years Exp

Infrastructure Security Intermediate

7.0/10

Years Exp

Cyber Security Intermediate

7.0/10

Years Exp

Nmap Intermediate

7.0/10

Years Exp

Burp Suite Intermediate

7.0/10

Years Exp

ServiceNow Intermediate

6.8/10

Years Exp

CVSS Intermediate

6.6/10

Years Exp

CVE Intermediate

6.6/10

Years Exp

Python Intermediate

6.0/10

Years Exp

Network Troubleshooting Intermediate

6.0/10

Years Exp

Risk Management Intermediate

6.0/10

Years Exp

Work Experience

Vulnerability Management Analyst

HCL Technologies

Jul 2024 - Present

Led enterprise-wide vulnerability scanning and security configuration assessments using Qualys VMDR across 10,000+ CMDB assets, including servers, endpoints, and network infrastructure. Performed vulnerability analysis and security configuration assessments aligned with the latest CIS benchmarks, customizing standards to meet internal environment requirements. Implemented and fine-tuned security hardening controls for critical infrastructure including Palo Alto and Fortinet firewalls, Cisco and Arista switches, and Aruba wireless controllers. Conducted security configuration assessments for Microsoft Azure environments, ensuring compliance with CIS Cloud Benchmarks and reducing cloud-specific misconfigurations. Achieved and consistently maintained a 90%+ compliance rate across enterprise assets through continuous monitoring, proactive remediation, and risk mitigation. Improved vulnerability remediation timelines by 50% through automated ticketing in ServiceNow, SLA monitoring, and cross-team collaboration. Utilized tools like Burp Suite and Nmap to validate vulnerabilities, eliminate false positives, and apply an offensive security mindset to enterprise defense. Conducted risk-based vulnerability prioritization using CVSS scoring and asset criticality to address high-risk exposures efficiently. Supported audit and compliance initiatives by generating executive-ready reports, dashboards, and remediation metrics.