Open to opportunities

Nishu Jain

@nishujain

Message

Security engineer specializing in vulnerability and attack surface management.

India

Message

What I'm looking for

I seek a security role focused on vulnerability and attack-surface management where I can automate workflows, reduce risk, influence remediation, and work cross-functionally in a collaborative, improvement-focused environment.

I am a security engineer with around 9 years of experience focused on threat and vulnerability management and security operations across infrastructure, applications and cloud environments.

I have led vulnerability lifecycle activities — discovery, triage, remediation and verification — and driven automation to improve intake, notification and remediation tracking using tools like Qualys, InsightVM, Nexpose and Jira.

I have performed application and infrastructure security assessments, reduced vulnerability counts through stakeholder collaboration, led POCs for attack-surface tooling, and supported DLP and cloud security initiatives while following frameworks such as ISO 27001 and NIST.

I hold certifications including CompTIA Security+, CISM, ITIL v3 and AWS Cloud Practitioner, and I seek to continue delivering measurable risk reduction, process automation and stronger secure SDLC practices.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

Ciena

Apr 2023 - Present (2 years 5 months)

Subject Matter Expert for Attack Surface and Vulnerability Management, led lifecycle of vulnerabilities from discovery to remediation and automated intake, alerting and Jira ticket creation to improve remediation workflows.

Vulnerability Management Qualys Jira Automation)Patch Management ServiceNow

Security Engineer

Aristocrat Technologies

Apr 2021 - Apr 2023 (2 years)

SME for Attack Surface and Vulnerability Management supporting full vulnerability lifecycle, conducted tool POCs, deployed DLP solutions and coordinated remediation with IT and business teams to reduce risk.

Vulnerability Assessment Digital Guardian ServiceNow Tool POCs

Vulnerability Analyst

Aon Hewitt

Oct 2019 - Mar 2021 (1 year 5 months)

Managed organisation-wide vulnerability scanning and false-positive validation, configured authenticated workstation scans and performed web application security testing to improve posture.

Vulnerability Testing Authenticated Scanning Application Security Qualys

Security Consultant

Accenture

Oct 2016 - Oct 2019 (3 years)

Provided vulnerability assessment and remediation support to US/UK clients, managed scanning schedules, prepared reports and drove remediation calls and CI/CD security activities across multiple projects.

Vulnerability Assessment client support CI CD Reporting