Haneesha Anand

Vulnerability Management professional with 7+ years of end-to-end VM lifecycle ownership across enterprise IT, cloud, and endpoint environments — spanning asset discovery, scanning operations, risk-based prioritization, remediation governance, and executive reporting. Deep hands-on expertise with Qualys VMDR, Tenable.sc/io, and ServiceNow, applying threat-informed prioritization (CVSS, EPSS, CWE, OWASP Top 10, MITRE ATT&CK) to align remediation with real-world attacker activity. Recognized for strong stakeholder engagement — leading vulnerability review meetings and presenting risk posture directly to security leadership and client CISOs.

IT Analyst – Cybersecurity / Vulnerability Management - Tata Consultancy Services (TCS)

(2019-01)

• Own end-to-end vulnerability management lifecycle for 80,000+ assets (servers, network devices, databases, security devices, AD, endpoints); manage Qualys agent deployment/lifecycle with ITAM and configure/integrate Tenable.sc, Tenable.io, Tenable Core, Tenable.ot, and Nessus.
• Reduced manual reporting effort by 60% through automated MSR, MOR, and executive dashboard reporting.
• Reduced credential scan failures by 40% through authentication troubleshooting and policy tuning.
• Lead criticality-based remediation (Critical → High → Medium) using CVSS, EPSS, and CWE scoring alongside asset criticality; conduct post-remediation re-scan validation and manage severity-tier SLAs with documented exception/risk-acceptance workflows and stakeholder approvals.
• Author and maintain VM governance documentation, including exception management policy, defining risk-acceptance criteria, compensating controls, SLA timelines, and escalation procedures.
• Improved enterprise vulnerability scan coverage by onboarding new assets, conducting discovery scans, resolving credential failures, and optimizing scan policies across Windows, Linux, and network environments.
• Perform manual assessments to eliminate false positives; led Tenable product upgrades/migrations with post-migration testing and validation.

B.Tech - Computer Science and Engineering - Sri Manakula Vinayagar Engineering College