Kumar Badiger

Cybersecurity Leader with 15+ years of experience in Vulnerability Management, Security Operations, Endpoint Security, Risk Management, and Compliance. Over 12 years of specialized experience building, scaling, and leading enterprise Vulnerability Management programs across large and complex environments. Extensive expertise in Qualys VMDR, Tenable, Rapid7 InsightVM, Wiz (CSPM, CNAPP), Microsoft Defender, vulnerability assessment, risk-based prioritization, remediation governance, compliance management, and security operations.

Proven track record of partnering with infrastructure, application, cloud, and business teams to drive vulnerability remediation and reduce organizational cyber risk. Currently leading a team of 12 security professionals responsible for enterprise vulnerability management, security assessments, remediation governance, stakeholder management, service delivery, and operational excellence. Experienced in managing global security programs, executive reporting, KPI/SLA governance, audit support, and security transformation initiatives.

Demonstrated success in leading cross-functional teams, improving remediation effectiveness, enhancing compliance posture, and delivering measurable security outcomes for global organizations.

Manager Information Security at CyberProof India Pvt Ltd (2025-09 – 2026-06)

Leading vulnerability assessment programs for multiple customers and acting as the primary point of contact for security and remediation teams.

• Managing and operating various vulnerability scanning tools such as Qualys VMDR, Tenable, Rapid7, Wiz, MS Defender and cloud-native security tools.
• Reviewing vulnerability findings, validating results, identifying false positives, and performing risk-based prioritization using CVSS scores, asset criticality, and business impact.
• Preparing executive dashboards, operational reports, vulnerability trends, and compliance metrics for customer management and leadership teams
• Coordinating with infrastructure, application, cloud, and security teams to ensure timely remediation and closure of vulnerabilities
• Conducting remediation review meetings, tracking SLA compliance, and driving risk reduction initiatives.
• Supporting audits, compliance requirements, and RFP/RFI activities by providing vulnerability management process documentation and metrics.
• Managing customer escalations, ensuring service delivery quality, and continuously improving vulnerability management processes
• Mentoring team members, reviewing deliverables, and ensuring adherence to security standards and customer-specific requirements.

Information Security Professional (Endpoint Security & Vulnerability Management) at DXC Technology (2023-04 – 2025-09)

Working as Information Security consultant.

• Managing Infrastructure security and governance
• Working with application team/BU for the outstanding security issue.
• Creating the vulnerability remediation plan according to change process.
• Creating plan for server hardening
• Working with infrastructure team for closing vulnerabilities.
• Handling exception
• Creating Project plan and scope documents
• Working on EDR tools, CrowdStrike, Tanium, Splunk, Qualys and BigFix.
• Presenting weekly metrics data to client.

Lead (IT Security & Vulnerability Management) at Fidelity Information Services (2016-10 – 2023-04)

• Provide Security recommendations as a subject matter expert to development teams during all phases of development.
• Monitor platform security and assist the team to make continuous improvement.
• Strong Knowledge of vulnerabilities and remediation as listed in sites like OWASP, etc.
• Perform review and analyze vulnerabilities report and identify applicability and false positives.
• Maintain awareness of latest threats and vulnerabilities.
• Ability to communicate effectively with business representatives in explaining impacts and strategies and where necessary.
• Provide vulnerability remediation plan and training to technical personnel.
• Working directly with internal business units to communicate risk and help resolves open vulnerabilities.
• Preparing weekly vulnerability remediation report and presenting to management on the progress.
• Knowledge of tools like BigFix, LANDesk, Lumension, Bit9, Wincollect, Encase, Cortex security tools.
• Understanding of ISO 270001 frameworks.

Systems Engineer at CGI-Information Systems (2015-06 – 2016-10)

• Performing vulnerability assessment on servers on schedule.
• Work with internal business units to drive secure configurations in images used for desktops, servers, network devices, and wireless network devices
• A working knowledge of vulnerabilities and configuration settings and their exploitation to gain access to networks, applications, servers
• Provide recommendations on improving the security posture of the client's enterprise.
• Finding false positive vulnerabilities reflecting for servers on dashboard.
• Working with change management team for getting all the changes approved on time for vulnerability remediation.
• Working with stake holders on getting the application up gradation/removal of vulnerable versions.

System Security Engineer at Adecco India Pvt Ltd (2012-04 – 2015-06)

• Worked as lead for IT compliance team.
• Performing internal audits for systems and servers
• Implementing and operation of SSG, SRX (Juniper) firewall.
• Working on Sentinel Log Manager for login failure success audits.
• Monitoring DLP alerts and taking course of action.
• Performing vulnerability assessment and port scanning with different tools.
• Infrastructure compliance assessment for servers and applications.
• Handling security incidents and delivering technical solutions for mitigation.
• Monitoring and Administration of EPO server console for virus attacks, malware infections.
• Patch Management (LANDesk, WSUS & SCCM) and Patch Compliance (includes patch Deployment, generating monthly reports).
• Performing vulnerability remediation manually as per approved downtime.
• Identifying manual remediation plan for critical and high vulnerability where in automated remediation doesn't work or is not suited.
• Performing monthly random audits for checking non-compliant servers, systems and software.
• Creating and maintaining documentation and reports for security incidents.
• Preparing monthly matrix report for non-compliance server and systems
• Preparing weekly dashboards for non-compliance and security incidents.
• Notable Credits: Best performer of the year.

Engineer at Prudente solutions (2011-05 – 2012-03)

• Monitoring and Administration of EPO server console for virus attacks, malware infection.
• Hands on experience in DHCP and Active directory operations and management.
• Monitoring security threats and performing compliance check for servers.
• Hands on experience in performing vulnerability assessment and mitigation.
• Responding to various types of security alerts and getting into root cause.
• Performing monthly patch deployment activity.
• Monitoring software and hardware usage in enterprise network.
• Creating necessary documents with attention to quality and adherefor process.
• Incident Monitoring and incident analysis for root cause.
• Preparing monthly report on non-compliance data analysis and recommendations for improvements.

System Engineer at I source Info systems Pune (2009-10 – 2010-12)

• Worked on windows patch management tool (WSUS).
• Performing security operations and server hardening activity.
• Worked on IT infra servers like DHCP Active directory services.
• Worked on McAfee antivirus and epo operations on desktops and servers
• Performing routine system and server health checks for vulnerabilities.
• Performing OS and application patch testing for compatibility.
• Providing technical remote support for user queries.
• Notable Credits: Received Spot award for giving support and resolving oracle database issue.

MBA in IT – Indian School of Business and Administration (2012 – 2013)

Diploma in Business Management (I.T) (2011 – 2012)

MCSE Training and Certification (2006-09 – 2007-03)

Diploma in Computer Science – Board of Technical Education Karnataka (2003 – 2006)