Technical Project Manager
Position: Technical Product Manager – Nessus (Agent)
Function: Cybersecurity – CSAT Engineering (Cybersecurity Assessments & Testing)
Client: LTM (End client: HSBC)
Location (in order of preference): 1) Hyderabad, 2) Pune first priority, 3) Bengaluru.
Total experience: 8+ years
Relevant experience: 4+ years hands-on with Tenable Nessus
Notice period: 60 days maximum (immediate to 30 days preferred)
Budget: Up to 25 LPA. Up to 28 LPA maximum for exceptional profiles, only if suitable candidates are not available within 25 LPA.
Role summary
The role sits in CSAT Engineering, which manages third-party and in-house application security and scanning tools. The Technical Product Manager supports the IT Service Owner as delegate and manages the infrastructure side of the service. The role covers roadmap and strategy, evergreening and vulnerability management with the SRE team, and compliance with bank controls (change/release management, logging, monitoring, scanning). It also covers developer experience and documentation, and ownership of all Nessus agent packaging and installs across the estate.
Mandatory requirements (candidates must have hands-on experience in all of these)
Candidates must have worked on design, development, migration and integration of Tenable Nessus. Please state clearly in the resume where they did each.
Tenable Nessus – strong, expert-level knowledge, both SaaS and on-prem, in solution design and operations.
Tenable.sc (Security Center).
Tenable.io / Tenable Vulnerability Management.
Vulnerability Assessment lifecycle.
Nessus architecture.
Nessus deployment: scanners and Nessus Manager.
Nessus Agent lifecycle management: packaging, testing, deployment, upgrades, compatibility, provisioning and troubleshooting offline agents. Agent deployment tools such as SCCM/MECM, Intune, Tanium, BigFix or Ansible are a plus.
Plugin lifecycle management: updates, testing and rollout.
Security Operations (SecOps) tools: Splunk, Microsoft Sentinel, QRadar or Elastic.
Infrastructure security: RHEL, CentOS, Ubuntu, sudo, SSH, Linux hardening.
Good to have
Risk-based vulnerability prioritisation, CVSS, false-positive analysis, remediation tracking, patch management
Windows security: Active Directory, Group Policy
Cloud security basics (AWS, Azure, GCP)
ITIL (incident, problem, change and release management), service ownership
Compliance and audit exposure (ISO 27001, NIST CSF, CIS Controls)
DevSecOps awareness (SAST, DAST, SCA, CI/CD)
Experience in a heavily regulated industry (BFSI preferred) and in remote or hybrid global teams