Principal Engineer - VMS I On-site, Bangalore

, incorporating technical severity, asset criticality, threat intelligence, business context, cloud posture, application risk, and compensating controls. The Principal Engineer will also serve as a technical escalation point, mentor engineering staff, drive automation and service improvements, and help establish consistent Exposure Management practices across client environments.

How You'll Make an Impact

• Provide technical leadership for

across infrastructure, endpoints, networks, operating systems, cloud platforms, applications, APIs, containers, Kubernetes, and software dependencies.

• Define and continuously improve the end-to-end Exposure Management lifecycle covering

.

• Design and maintain assessment policies, security baselines, scan configurations, credentials, schedules, coverage standards, and technical procedures across supported security platforms.
• Lead the identification and management of security exposures including software vulnerabilities, application weaknesses, cloud misconfigurations, insecure configurations, vulnerable dependencies, exposed services, container risks, and other technology weaknesses.
• Establish

that consider factors such as severity, exploitability, active exploitation, asset criticality, external exposure, business impact, application context, threat intelligence, and available compensating controls.

• Analyze and validate security findings to improve accuracy, eliminate false positives and duplicate findings, identify systemic risk, and ensure remediation efforts focus on meaningful security exposures.
• Work closely with infrastructure, cloud, application, DevOps, networking, platform, and security teams to translate exposure findings into clear and actionable remediation activities.
• Provide technical leadership for enterprise security assessment technologies and capabilities including network and agent scanning, credentialed assessments, cloud posture assessment, application security testing, dependency analysis, container security, API security, and Infrastructure-as-Code security.
• Support the integration of security assessments into modern engineering and

, helping identify and remediate exposures earlier in the technology and application lifecycle.

• Define and maintain technical integrations between Exposure Management technologies and enterprise platforms such as

.

• Develop dashboards and reporting that provide meaningful visibility into overall exposure, remediation progress, aging, coverage, trends, SLA performance, recurring weaknesses, and risk reduction.
• Establish metrics and KPIs that measure the effectiveness and maturity of Exposure Management rather than focusing solely on the volume of vulnerabilities or findings.
• Identify opportunities for

across discovery, enrichment, validation, prioritization, assignment, remediation tracking, exception management, and reporting.

• Lead troubleshooting and resolution of complex issues involving scanning, integrations, assessment coverage, credentials, policies, cloud configurations, application testing, asset identification, and reporting.
• Support the onboarding of new clients, technologies, applications, cloud environments, and security platforms into the Exposure Management service.
• Evaluate emerging Exposure Management technologies and capabilities and provide technical recommendations for service enhancement and technology adoption.
• Develop and maintain engineering standards, operating procedures, runbooks, implementation guides, knowledge articles, and technical documentation.
• Provide technical mentoring and knowledge transfer to engineers and analysts, helping develop deeper expertise across infrastructure, cloud, and application security disciplines.
• Serve as a senior technical advisor during client security reviews, technical workshops, escalations, architecture discussions, and service improvement initiatives.
• Stay current with emerging vulnerabilities, exploitation techniques, application security risks, cloud security threats, attack-surface trends, and evolving Exposure Management practices.

• 10+

, with significant experience across vulnerability management, security engineering, cloud security, application security, or related security disciplines.

• 6

implementing, managing, or engineering enterprise security assessment and Exposure Management technologies.

• Strong understanding of the complete vulnerability and exposure lifecycle, including

.

• Experience assessing diverse enterprise environments including Windows, Linux/Unix, network devices, virtualized infrastructure, AWS, Microsoft Azure, containers, Kubernetes, applications, APIs, and cloud workloads .
• Hands-on experience with enterprise vulnerability or exposure technologies such as

.

• Experience with cloud security and posture-management technologies such as

.

• Experience with application security capabilities including SAST, DAST, Software Composition Analysis (SCA), API security, secrets detection, container scanning, and Infrastructure-as-Code security .
• Experience with application security technologies such as

is desirable.

• Strong understanding of risk-based prioritization and the ability to combine vulnerability severity with asset importance, exploitability, exposure, threat intelligence, business context, and compensating controls.
• Understanding of industry security standards and frameworks including

.

• Experience establishing metrics and dashboards capable of communicating technical risk, remediation progress, coverage, service performance, and security posture to both technical and executive audiences.
• Experience integrating security platforms with technologies such as

.

• Strong analytical and troubleshooting skills with the ability to work across complex and heterogeneous enterprise environments.
• Ability to translate large volumes of technical security findings into prioritized, actionable risk-reduction activities.
• Strong understanding of security architecture, networking, cloud architectures, modern application architectures, containers, DevOps, and enterprise infrastructure.
• Demonstrated ability to lead complex technical initiatives and provide technical direction to engineers without requiring direct management responsibility.
• Ability to foster collaborative working relationships across Security, Infrastructure, Cloud, Application Development, DevOps, Architecture, and business stakeholders.
• Strong client-facing communication skills with the ability to explain technical exposure and risk to both engineering and leadership audiences.
• Excellent written and verbal communication skills.

#LI-AJ1

• A company committed to our inclusive value through our Employee Resource Groups
• Work/life balance
• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities. "Optiv Chips In" encourages employees to volunteer and engage with their teams and communities.
• The ability and technology necessary to productively work remotely/from home (where applicable)