---
title: 'Vulnerability Management & Security Assessment Engineer (L2) – Qualys VMDR at Gruve'
canonical: 'https://feeny.ai/job/vulnerability-management-security-assessment-engineer-l2-qualys-vmdr-gruve-india-ex58qf4xtn7f'
type: 'job'
last_seen: '2026-11-11'
---

# Vulnerability Management & Security Assessment Engineer (L2) – Qualys VMDR at Gruve

- **Company:** Gruve
- **Location:** India
- **Work type:** remote
- **Posted:** 2026-11-06
- **Last confirmed live:** 2026-11-11
- **Apply:** https://gruve.ai/careers/?gh_jid=5474037008

## Job description

## About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position summary:

Responsible for enterprise InfoSec operations covering vulnerability scanning and analysis, security assessments, control reviews, remediation validation, compliance reporting and incident management. The role focuses on technical troubleshooting, evidence validation, remediation coordination and continuous operational improvement.

Key Responsibilities:

Vulnerability Management Operations (Scanning & Analysis)

- Administer and troubleshoot vulnerability scans using Qualys VMDR or equivalent platforms.
- Investigate scan failures, authentication issues, scanner connectivity and asset discovery gaps.
- Analyze CVEs, CVSS severity, affected assets and vulnerability trends.
- Validate asset coverage and investigate discrepancies in scan results.
- Support risk-based prioritization based on severity, exploitability, asset criticality and remediation SLAs.
- Investigate recurring findings and potential false positives; coordinate with Security SMEs as required.

Security Assessment & Review Support

- Coordinate technical security assessments and infrastructure control reviews.
- Review evidence for access management, patching, configuration compliance, logging and backup controls.
- Validate submitted evidence against defined security requirements and assessment checklists.
- Identify control gaps, missing evidence, policy deviations and compliance issues.
- Coordinate with infrastructure and application owners to resolve assessment observations.
- Maintain assessment records and escalate complex control interpretation issues to Security or Risk SMEs.

Remediation Tracking & SLA Monitoring (Including Rescan Validation)

- Coordinate remediation activities with Server, Network, Database, Cloud and Application teams.
- Track vulnerability aging, action owners, remediation deadlines and SLA breaches.
- Review remediation plans and follow up on overdue critical and high-severity findings.
- Validate remediation through rescans and review updated vulnerability status.
- Investigate recurring vulnerabilities and discrepancies between remediation claims and scan results.
- Track exceptions and escalate unresolved findings for appropriate risk review and approval.

Compliance Reporting & Audit Support

- Generate vulnerability, remediation aging, assessment status and compliance reports.
- Analyze trends, overdue findings, SLA breaches and recurring control deficiencies.
- Maintain vulnerability registers, assessment trackers, dashboards and evidence repositories.
- Support internal and external audits by coordinating and validating technical evidence.
- Track compliance against organizational security policies and applicable control frameworks.
- Recommend improvements to reporting accuracy, evidence quality and audit readiness.

Incident & Service Management (Including Improvement)

- Troubleshoot complex vulnerability management platform and assessment workflow incidents.
- Perform root-cause analysis for recurring scan failures, authentication issues and reporting discrepancies.
- Manage incidents and service requests within defined SLAs using approved ITSM workflows.
- Follow ITIL Incident, Problem, Change and Request Management processes, as applicable.
- Maintain SOPs, runbooks, knowledge articles and shift handover documentation; provide guidance to L1.
- Identify automation opportunities, recurring operational gaps and process improvements; coordinate implementation through approved change procedures.

Required Skills & Qualifications:

- 3–6 years of experience in cloud infrastructure operations, administration and production support across Microsoft Azure and/or AWS environments.
- Hands-on experience with Qualys VMDR or equivalent vulnerability management tools.
- Strong understanding of CVEs, CVSS, vulnerability scanning and remediation validation.
- Experience with security assessments, technical evidence reviews and control gap identification.
- Knowledge of Windows/Linux, networking, databases, cloud and enterprise IT environments.
- Experience with ServiceNow or equivalent ITSM tools, reporting and SLA management.
- Strong troubleshooting, analytical, documentation and stakeholder coordination skills.
- Global 24x7x365 support across APAC, EMEA and NLAM, with rotational shifts and follow-the-sun handovers.

Preferred Skills & Qualifications:

- Qualys certification or exposure to Qualys Policy Compliance and related modules.
- Knowledge of ISO 27001, SOC 2, CIS Benchmarks or other security frameworks.
- Exposure to GRC platforms, audit management and risk exception workflows.
- Basic scripting skills in PowerShell, Python or Shell.
- Experience with security dashboards, automation and operational process improvement.
- Security+, ITIL or relevant information security certifications.

## Key Competencies

Qualys VMDR | Vulnerability Analysis | Security Assessments | Evidence Validation | Remediation Tracking | Rescan Validation | Compliance Reporting | Root-Cause Analysis | ITSM | SLA Management | Continuous Improvement | Global 24x7 Operations

## Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.

## About Gruve

## Company Overview
- **One-liner**: Gruve provides AI-native cybersecurity, infrastructure, and data services that help enterprises deploy and secure AI at scale.
- **Entity Type**: Private (Series A, Seed stage)
- **Headquarters**: Redwood City, California, United States
- **Founded**: 2024
- **Founders**: Tarun Raisoni (CEO, Co-Founder)

## Core Business
- **Industry**: IT Services and IT Consulting; AI Security & Infrastructure
- **Target Customers**: Large enterprises (B2B), including those in regulated industries requiring private AI deployment and advanced security operations.
- **Mission / Purpose**: Enable scalable, secure, and measurable AI execution in production by delivering an AI-native approach to enterprise services.

## Products & Services
- **PulseAI**: A private AI infrastructure platform that enables enterprises to deploy generative AI on-premises, in the cloud, or in hybrid environments – production-ready in under two weeks. (SaaS/infrastructure)
- **AI SOC**: An AI-driven Security Operations Center that combines AI detection, automated investigation, and intelligent response to improve security team efficiency and reduce risk. (Managed service/SaaS)
- **Digital Forensics & Incident Response**: Structured methodologies for preserving evidence, investigating incidents, and accelerating recovery. (Service)
- **Enterprise AI Transformation Services**: Consulting and implementation services including data science, Kubernetes SRE, forward deployment engineering, and AI solution architecture. (Professional services)

## Market Standing
- **Valuation**: Not disclosed
- **Total Funding**: USD $57.5 million (across Seed and Series A rounds)
- **Key Investors**: Mayfield Fund (lead in Series A), Xora Innovation (lead in prior round)
- **Notable Acquisitions**: SecurView (July 2024), NetServ (September 2024), Lumos (October 2024)
- **Growth Signals**: 120.3% YoY employee growth (from ~134 to 413 employees); operations across 9 countries; featured in Cybersecurity Insiders on AI agent governance.

## Competitive Advantages
- **AI-Native Architecture**: Unlike legacy stacks built for static software, Gruve designs for dynamic AI workloads (probabilistic decisions, context retrieval, autonomous actions).
- **Speed to Scale**: Claims 500MW+ of distributed edge AI inference capacity and a 30% cost advantage over alternatives.
- **Integrated Security & AI**: Combines private AI infrastructure (PulseAI) with an AI-powered SOC, covering the entire lifecycle from deployment to defense.
- **Talent & Expertise**: Team draws from top firms (Cisco, IBM, Infosys) and includes deep Kubernetes, data science, and cybersecurity specialists.

## Strategic Focus
- **Private AI Deployment**: Helping enterprises keep AI workloads on their own infrastructure to maintain data ownership, governance, and security.
- **AI Security Governance**: Developing solutions to govern AI agents as a new attack surface, as highlighted in their recent thought leadership.
- **Global Expansion**: Operating in 9 countries (US, India, South Korea, UAE, Singapore, Japan, Saudi Arabia, Germany, Canada) with plans to scale further.
- **Partner Ecosystem**: Working closely with hyperscalers (noted VP of Hyperscaler Solutions) and achieving Red Hat advanced tier partner status.

## Why Work Here
- **High Growth Environment**: Headcount more than doubled in the past year, offering rapid career progression and the chance to shape a young company.
- **Culture of Trust**: Core values include giving trust from day one, constructive feedback, and a championship mindset.  
- **Global & Remote-Friendly**: Offices in 4 countries (US, India, Singapore, UAE) and remote roles posted; a distributed team with cultural diversity.
- **Learning & Impact**: Mentorship programs, opportunities to lead innovative projects in AI and security, and the ability to work on cutting-edge infrastructure.
- **Notable Perks**: Focus on career development, knowledge sharing, and a "people-first" approach.

## Sources
1. [gruve.ai – Company homepage](https://gruve.ai/)
2. [gruve.ai – About Us](https://gruve.ai/about-us/)
3. [gruve.ai – Life at Gruve](https://gruve.ai/life-at-gruve/)
4. [linkedin.com/company/gruveai – LinkedIn Company Page](https://www.linkedin.com/company/gruveai)
5. [job-boards.greenhouse.io/gruve – Careers Page](https://job-boards.greenhouse.io/gruve)

## Other roles at Gruve

- [Identity & Access Support Analyst (L1) – Active Directory, LDAP & ADFS](https://feeny.ai/job/identity-access-support-analyst-l1-active-directory-ldap-adfs-gruve-india-0ye2c1xj0c12) — India
- [Security Operations Analyst (L1) – MS- Defender](https://feeny.ai/job/security-operations-analyst-l1-ms-defender-gruve-india-ynsbs12h8w8v) — India
- [Endpoint Operations Analyst (L1) – Intune & SCCM](https://feeny.ai/job/endpoint-operations-analyst-l1-intune-sccm-gruve-india-7t5jxvke67hz) — India
- [L1 System Administrator | Windows, VMware & Cloud Operations](https://feeny.ai/job/l1-system-administrator-windows-vmware-cloud-operations-gruve-india-2j0emswr2q06) — India
- [Endpoint Security Operations Engineer (L2) – Microsoft Defender](https://feeny.ai/job/endpoint-security-operations-engineer-l2-microsoft-defender-gruve-india-e2qkn15z5hnr) — India
- [Identity & Access Operations Engineer (L2) – Active Directory, LDAP & ADFS](https://feeny.ai/job/identity-access-operations-engineer-l2-active-directory-ldap-adfs-gruve-india-tg3gbwqgensx) — India
- [Endpoint Management Engineer (L2) – Intune & SCCM/MECM](https://feeny.ai/job/endpoint-management-engineer-l2-intune-sccm-mecm-gruve-india-ystzggvts8d8) — India
- [Backup & Storage Engineer (L2) – Commvault, NetBackup & Veeam](https://feeny.ai/job/backup-storage-engineer-l2-commvault-netbackup-veeam-gruve-india-4mp4ezra5v14) — India
- [L1 PAM Operations Engineer | Privileged Access Management (PAM) Operations](https://feeny.ai/job/l1-pam-operations-engineer-privileged-access-management-pam-operations-gruve-6bzxs5103x6p) — India
- [Director of Human Resources](https://feeny.ai/job/director-of-human-resources-gruve-redwood-city-m1azzpdexmrc) — Redwood City, CA