Arun Kumar

5+ years of experience in Cybersecurity, specializing in Vulnerability Management, with expertise in identifying, assessing, and remediating security vulnerabilities across IT infrastructures.

Senior Vulnerability Management Analyst - SourceOne Consultancy Services Pvt. Ltd - Client: Deloitte

(2025-12)

• Conducted Vulnerability assessments on IT systems and networks using Qualys for Endpoint to identify and mitigate security risks.
• Performed regular vulnerability scans, including weekly and monthly reports, to ensure comprehensive coverage of the organization's infrastructure.
• Assess application/infrastructure vulnerability criticality according to exploitability Manages day-to-day operations of the security systems and resolving client issues by monitoring system performance, configuration, maintenance.
• Strong Knowledge of threats and vulnerabilities associated with cloud and on-premises network security.
• High-level familiarity with Vulnerability Management tools such as Qualys, ServiceNow.
• Understanding customer issues and finding ways to improve the quality of product and service.
• Coordinated with cross-functional teams to resolve vulnerabilities and enhance the organization's overall security posture.
• Managing end-to-end vulnerability remediation and patch management activities for workstation enironments.
• Managing third-party application and browser patching using SCCM, Intune, and Patch My PC.
• Coordinating with Global, Infrastructure, application, and security teams to ensure timely vulnerability closure.
• Managed vulnerability tickets in ServiceNow, ensuring proper documentation, tracking, and resolution of identified issues.
• Implemented best practices for vulnerability vulnerability remediation, including patch management and configuration changes to reduce exposure.

Vulnerability Management Analyst - Tata Consultancy services

(2022-03 - 2025-12)

Experience: 3.10 years Tools Worked: Qualys, Tenable (Nessus Scan), Microsoft Defender, Nucleus, and ServiceNow.

• Performed vulnerability Assessments using Qualys and Tenable for Endpoint to identify, prioritize, and remediate security vulnerabilities.
• Performed regular weekly and monthly vulnerability scans and generated comprehensive reports to monitor security posture and ensure complete coverage of the organization's IT infrastructure.
• Working on cloud-based servers(Azure)/on-prem servers and resolving the issues identified by them.
• Provided actionable insights and recommendations based on vulnerability scan reports, driving timely remediation efforts.
• Generated and delivered vulnerability reports to stakeholders, tracking remediation progress and highlighting critical risks.
• Analyzed vulnerability data, correlating findings with threat intelligence to prioritize risks based on secerity.
• Performed risk assessments on newly discovered vulnerabilities, classifying them based on business impact and asset criticality.
• Working with engineers/consultants and ensure to provide 24 hours costumer support.
• Experience in generating detailed reports, Compliance documentation, dashboards. Strong collaboration skills with cross-functional teams and Clients.
• Knowledge of ISO/IEC 27001:2022 standards, ISMS implementation audit, audit preparation, policy enforcement, risk assessments, and documentation for compliance and regulatory readiness.
• Working on ServiceNow VR Module environment like groups creation, splitting groups, exceptions handling, taking care of false positive, change requests creation etc.

Bachelor of Technology - Electronics and Communication Engineering - University College of Engineering, Kakatiya University(UCE-KU)