Technical Product Manager Nessus (Agent)

Role:

The role sits in CSAT Engineering, which manages third-party and in-house application security and scanning tools. The Technical Product Manager supports the IT Service Owner as delegate and manages the infrastructure side of the service. The role covers roadmap and strategy, evergreening and vulnerability management with the SRE team, and compliance with bank controls (change/release management, logging, monitoring, scanning). It also covers developer experience and documentation, and ownership of all Nessus agent packaging and installs across the estate.

Mandatory requirements (candidates must have hands-on experience in all of these)

1. Candidates must have worked on design, development, migration and integration of Tenable Nessus. Please state clearly in the resume where they did each.
2. Tenable Nessus – strong, expert-level knowledge, both SaaS and on-prem, in solution design and operations.
3. Tenable.sc (Security Center).
4. Tenable.io / Tenable Vulnerability Management.
5. Vulnerability Assessment lifecycle.
6. Nessus architecture.
7. Nessus deployment: scanners and Nessus Manager.
8. Nessus Agent lifecycle management: packaging, testing, deployment, upgrades, compatibility, provisioning and troubleshooting offline agents. Agent deployment tools such as SCCM/MECM, Intune, Tanium, BigFix or Ansible are a plus.
9. Plugin lifecycle management: updates, testing and rollout.
10. Security Operations (SecOps) tools: Splunk, Microsoft Sentinel, QRadar or Elastic.
11. Infrastructure security: RHEL, CentOS, Ubuntu, sudo, SSH, Linux hardening.

Good to have

• Risk-based vulnerability prioritisation, CVSS, false-positive analysis, remediation tracking, patch management
• Windows security: Active Directory, Group Policy
• Cloud security basics (AWS, Azure, GCP)
• ITIL (incident, problem, change and release management), service ownership
• Compliance and audit exposure (ISO 27001, NIST CSF, CIS Controls)
• DevSecOps awareness (SAST, DAST, SCA, CI/CD)
• Experience in a heavily regulated industry (BFSI preferred) and in remote or hybrid global teams