Sarvesh Wagh

Vulnerability Management Analyst

Hyderabad 1+ yrs exp 83 · Excellent

About

Vulnerability Management analyst with more than 1 year supporting a major pharmaceutical enterprise at Cognizant. Hands-on with risk-based triage, validation, and prioritisation of vulnerabilities across enterprise, cloud, and application environments using Qualys. Strong in CVSS-based prioritisation, false-positive management, SLA governance, and clear reporting for technical and leadership stakeholders. Proficient in Linux, Python, and Bash.

Skills & Expertise (26)

Splunk Intermediate

6.4/10

0.5

Years Exp

Log Analysis Intermediate

6.0/10

Years Exp

WIRESHARK Intermediate

6.0/10

Years Exp

Vulnerability Management Intermediate

6.0/10

Years Exp

Security Event Triage Intermediate

5.6/10

Years Exp

CVSS scoring Intermediate

5.6/10

Years Exp

CVE analysis Intermediate

5.6/10

Years Exp

Burp Suite Intermediate

5.6/10

Years Exp

OWASP Top 10 Intermediate

5.6/10

Years Exp

Qualys Intermediate

5.4/10

Years Exp

Nmap Intermediate

5.4/10

Years Exp

Bash Intermediate

5.0/10

Years Exp

Python Intermediate

5.0/10

Years Exp

LINUX Intermediate

5.0/10

Years Exp

SLA Management Intermediate

5.0/10

Years Exp

Incident Response Lifecycle Intermediate

5.0/10

Years Exp

MITRE ATT&CK Intermediate

5.0/10

Years Exp

MS Defender Intermediate

5.0/10

Years Exp

Metasploit Intermediate

5.0/10

Years Exp

Secure SDLC Intermediate

4.8/10

Years Exp

SAST Intermediate

4.8/10

Years Exp

DAST Intermediate

4.8/10

Years Exp

API Security Testing Intermediate

4.8/10

Years Exp

Executive Reporting Intermediate

4.8/10

Years Exp

ServiceNow Intermediate

4.8/10

Years Exp

DNS

Work Experience

Cyber Security Operation Analyst

Cognizant Technology Solutions Pvt ltd

Aug 2025 - Present

Managed the full vulnerability lifecycle across 100+ applications for a major pharma client — risk-based triage, validation, and prioritisation using CVSS — reducing open vulnerabilities from 2,000+ to ~400 in 8 months at 97%+ SLA compliance. Investigated and managed false positives to improve remediation accuracy; tracked vulnerabilities through to closure with clear ownership and escalation of overdue or high-risk items. Maintained trackers and dashboards documenting vulnerability status, remediation timelines, and closure actions — supporting internal audits and client compliance reviews. Produced weekly vulnerability dashboards, KPIs, and SLA metrics for client and leadership stakeholders, giving clear risk visibility to both technical and non-technical audiences. Coordinated with application, development, and DevOps teams to track remediation timelines and drive issues to closure across a 100+ application portfolio. Automated recurring reporting workflows using Python and Bash, reducing manual effort in dashboard and tracker maintenance. Maintained structured documentation and supported audit and compliance activities in a regulated pharma environment through evidence collection and reporting.

Cyber Security Intern

Cognizant Technology Solutions Pvt ltd

Mar 2025 - Aug 2025

Worked with Splunk SIEM for log analysis, security event monitoring, and basic alert triage. Explored Microsoft Defender EDR for endpoint threat detection and alert classification workflows. Practiced web application security testing using Burp Suite — intercepted requests and identified OWASP Top 10 vulnerabilities in lab environments. Analysed network traffic using Wireshark; gained hands-on understanding of TCP/IP, DNS, and HTTP/S protocols. Built foundational knowledge in networking (OSI model, firewalls, IDS/IPS) and core security concepts (CIA triad, access control, incident response basics).