Principal Engineer - VMS I On-site, Bangalore

This position is required to be on-site at our Bangalore office 3 days per week The Principal Engineer – Exposure Management will serve as a senior technical leader and subject matter expert responsible for advancing the organization’s Exposure Management capabilities across infrastructure, cloud, applications, containers, and modern technology environments. The role will be responsible for developing technical standards, procedures, and scalable operational processes for continuously identifying, assessing, validating, prioritizing, and reducing security exposures across internal and client environments. The Principal Engineer will work closely with Management, Solution Architects, Senior Engineers, Security Engineers, application and cloud teams, other Principal Engineers, and clients to deliver and mature high-profile Managed Security Services. This individual will provide technical leadership across the entire exposure lifecycle, helping move security programs beyond isolated vulnerability findings toward a risk-based view of exploitable exposure, incorporating technical severity, asset criticality, threat intelligence, business context, cloud posture, application risk, and compensating controls. The Principal Engineer will also serve as a technical escalation point, mentor engineering staff, drive automation and service improvements, and help establish consistent Exposure Management practices across client environments. How You’ll Make an Impact Provide technical leadership for Exposure Management services across infrastructure, endpoints, networks, operating systems, cloud platforms, applications, APIs, containers, Kubernetes, and software dependencies. Define and continuously improve the end-to-end Exposure Management lifecycle covering discovery, assessment, validation, contextualization, prioritization, remediation, reporting, and continuous improvement. Design and maintain assessment policies, security baselines, scan configurations, credentials, schedules, coverage standards, and technical procedures across supported security platforms. Lead the identification and management of security exposures including software vulnerabilities, application weaknesses, cloud misconfigurations, insecure configurations, vulnerable dependencies, exposed services, container risks, and other technology weaknesses. Establish risk-based prioritization methodologies that consider factors such as severity, exploitability, active exploitation, asset criticality, external exposure, business impact, application context, threat intelligence, and available compensating controls. Analyze and validate security findings to improve accuracy, eliminate false positives and duplicate findings, identify systemic risk, and ensure remediation efforts focus on meaningful security exposures. Work closely with infrastructure, cloud, application, DevOps, networking, platform, and security teams to translate exposure findings into clear and actionable remediation activities.