Open to international roles: relocation or remote.

Deepanshu Jha

Threat & Vulnerability Management Lead Security Automation & AI/GenAI Engineering

I help enterprises find, prioritize and fix vulnerabilities at scale, and I automate the manual work so security teams can focus on real risk.

Download Resume Contact Me
  • Risk-based VM
  • Qualys · Tenable · Rapid7 · Defender
  • Python · PowerShell · Power Automate
  • GenAI

$ whoami

Deepanshu Jha · TVM Lead · Noida, India (IST, UTC+5:30)

$ cat focus.txt

Discover → Assess → Prioritize → Remediate → Verify → Report → Automate

Type help to explore. Try skills, experience or sudo hire-me.

7+

years in enterprise cybersecurity

150K+

managed endpoints, scaled from 6K (25×)

4

enterprise VM platforms: Qualys, Tenable, Rapid7, Defender

Star Performer

recognition at HCLTech

01 / About

Security that scales, automation that sticks.

I am a Threat & Vulnerability Management (TVM) Lead with 7+ years in enterprise cybersecurity. At HCLTech, I lead TVM delivery for enterprise clients and scaled managed asset coverage from 6,000 to more than 150,000 endpoints. I run risk-based vulnerability management end to end: vulnerability scanning and assessment, prioritization with CVSS, EPSS and CISA KEV, patch management, remediation tracking and executive reporting.

I build security automation with Power Automate, Python and PowerShell that turns security advisories, IOCs and threat intelligence into fast, clear action for stakeholders. Today I combine vulnerability management with AI and GenAI engineering to make security operations faster and more reliable.

Core competencies

  • Threat & Vulnerability Management (TVM)
  • Risk-Based Vulnerability Management (RBVM)
  • Vulnerability Assessment & Scanning
  • Vulnerability Prioritization
  • Remediation Tracking
  • Patch Management & Patch Compliance
  • Secure Configuration Management
  • Security Hardening (CIS, STIG)
  • Attack Surface Management
  • Asset Inventory & Coverage
  • Threat Intelligence & IOC Analysis
  • Security Operations
  • Incident Response
  • Network Access Control (Cisco ISE)
  • Risk Management & Compliance
  • Security Metrics (KPI/KRI)
  • Security Automation & SOAR
  • AI/GenAI Engineering
  • Stakeholder Communication
  • Web Design

02 / Approach

How I run the vulnerability management lifecycle

Select a stage of the vulnerability lifecycle to see what I do and the tools I use.

Discover: know every asset

Build and maintain an accurate asset inventory, expand agent coverage and manage the attack surface. Scaled managed asset coverage from 6,000 to 150,000+ endpoints.

  • Asset Inventory
  • Attack Surface Management
  • Qualys Cloud Agent
  • Endpoint Coverage

Assess: scan and measure

Run vulnerability scanning and vulnerability assessment across endpoints, servers and web applications. Check policy compliance against CIS Benchmarks and STIGs, and monitor file integrity.

  • Qualys VMDR
  • Qualys Policy Compliance
  • Qualys WAS
  • Tenable Nessus
  • Tenable.io / Tenable.sc
  • Rapid7 InsightVM
  • Microsoft Defender VM
  • FIM

Prioritize: fix what matters first

Apply risk-based vulnerability management: combine CVSS severity, EPSS exploit probability, CISA KEV status and threat intelligence from security advisories, mapped to MITRE ATT&CK.

  • CVE
  • CVSS
  • EPSS
  • CISA KEV
  • Threat Intelligence
  • MITRE ATT&CK

Remediate: patch and harden

Drive patch management and secure configuration through enterprise tooling, track remediation in ServiceNow Vulnerability Response, and harden systems to secure baselines.

  • SCCM / MECM
  • Intune
  • WSUS
  • ManageEngine
  • Ansible
  • ServiceNow VR
  • CIS Benchmarks

Verify: close the loop

Validate fixes with rescans and patch compliance checks. Manage exceptions and risk acceptance through a risk register when a fix is not possible yet.

  • Patch Compliance
  • Exception Management
  • Risk Acceptance
  • Risk Register

Report: make risk visible

Turn findings into security metrics, KPI/KRI dashboards and executive reporting that stakeholders can act on.

  • KPI / KRI
  • Power BI
  • SharePoint
  • Executive Reporting
  • Gap Assessments

Automate: remove the busywork

Automate advisory assessment, IOC enrichment, threat briefings and reporting with workflows, scripts, SOAR playbooks, API integrations and GenAI.

  • Power Automate
  • Python
  • PowerShell
  • KQL
  • SOAR Playbooks
  • API Integrations
  • LLM / GenAI

03 / Experience

Where I have delivered

  1. Cyber Security Senior Specialist / TVM Lead

    HCLTech · Noida, India

    May 2019 – Present

    • Lead Threat & Vulnerability Management (TVM) delivery for enterprise clients, from vulnerability scanning to remediation and reporting.
    • Scaled managed asset coverage from 6,000 to 150,000+ endpoints.
    • Built Power Automate workflows that assess security advisories and automatically notify stakeholders on Microsoft Teams.
    • Automated a daily threat intelligence briefing, published organization-wide through SharePoint.
    • Built an IOC analysis pipeline that parses advisory emails, enriches indicators of compromise and logs them to a SharePoint tracker.
    • Drive CIS Benchmark hardening, file integrity monitoring (FIM), alert investigation, patch compliance and web application scanning.
    • Administered Cisco ISE network access control, Active Directory and patch management for a US energy-sector client.
    • Qualys VMDR
    • Tenable
    • Rapid7
    • Defender VM
    • Power Automate
    • SharePoint
    • Cisco ISE
    • Active Directory

  2. Freelance IT Infrastructure Support

    Sage IAS Pvt. Ltd · Startup

    2015 – 2018

    • Supported network devices, servers, Windows systems and hardware for a growing startup.

04 / Skills

Toolbox

Vulnerability Management

  • Qualys VMDR
  • Qualys Policy Compliance
  • Qualys Cloud Agent
  • Qualys WAS
  • FIM
  • Patch Management
  • Tenable Nessus
  • Tenable.io / Tenable.sc
  • Rapid7 InsightVM
  • Microsoft Defender VM
  • CVE / CVSS / EPSS
  • CISA KEV
  • Risk-based VM
  • Vulnerability Assessment
  • Vulnerability Scanning
  • Attack Surface Management

Patch & Configuration

  • SCCM / MECM
  • Intune
  • WSUS
  • ManageEngine
  • Ansible
  • CIS Benchmarks
  • STIGs
  • Secure Baselines
  • Configuration Management
  • Security Hardening

Threat & Response

  • Security Advisory Analysis
  • IOC Analysis
  • Threat Intelligence
  • MITRE ATT&CK Mapping
  • Threat Hunting
  • Incident Response
  • Microsoft Sentinel
  • Malware Analysis
  • Alert Investigation

Governance, Risk & Compliance

  • CIS Controls
  • HIPAA
  • Risk Management
  • Risk Register
  • Risk Acceptance
  • Exception Management
  • Third-Party Risk
  • KPI / KRI
  • Security Metrics
  • Executive Reporting
  • Gap Assessments

Automation & AI

  • Python
  • PowerShell
  • KQL
  • SQL
  • Power Automate
  • ServiceNow VR
  • SOAR Playbooks
  • API Integrations
  • Power BI
  • LLM / GenAI Engineering
  • AI Agents
  • Local / Self-hosted AI

Cloud & Infrastructure

  • Azure
  • Active Directory
  • Microsoft 365
  • Google Workspace
  • Cisco ISE
  • Cloudflare
  • DNS
  • Linux
  • Windows
  • macOS

Web Design & Build

  • Web Design
  • HTML
  • CSS
  • JavaScript
  • Responsive Design
  • Accessibility
  • Performance
  • Security Headers
  • WordPress
  • Hostinger
  • Cloudflare

05 / Projects

Things I have built

AI · Privacy

AEGIS

A local, privacy-first AI home assistant with a voice pipeline, local vector memory and consent-gated automation.

  • LLM
  • Voice
  • Vector Memory
  • Self-hosted AI
GitHub →

Automation · Threat Intel

Advisory & IOC Automation Pipelines

Workflows that assess security advisories, parse and enrich IOCs, log them to SharePoint and alert stakeholders on Teams.

  • Power Automate
  • SharePoint
  • Teams
  • Threat Intelligence

Tooling · Reporting

Enterprise Patch & Reporting Tools

PowerShell and Python tools for patch cleanup, plus automated Power BI and SharePoint reporting.

  • PowerShell
  • Python
  • Power BI
  • SharePoint

06 / Web Design

I also design and build fast, secure websites.

Security people should ship sites that pass their own audit. This one does.

This site · me.securecybervm.com

Designed and built from scratch

Hand-written HTML, CSS and vanilla JavaScript. No frameworks, no trackers, no third-party requests. Strict Content Security Policy with Trusted Types and zero inline scripts.

100Performance
100SEO
A+Security headers
page weight
–
requests
–
third-party
0
loaded in
–

Lighthouse scores from Google PageSpeed (mobile); grade from securityheaders.com. Live stats are measured in your browser right now.

view response headers 
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; script-src 'self';
  style-src 'self'; img-src 'self' data:; font-src 'self';
  frame-ancestors 'none'; require-trusted-types-for 'script'; …
x-content-type-options: nosniff
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=(), …
cross-origin-opener-policy: same-origin

Blog · WordPress

SecureCyberVM

My security blog on vulnerability management, security automation and practical defense, run on WordPress behind Cloudflare.

  • WordPress
  • Cloudflare
  • Content
Visit securecybervm.com →

Principles

How I build

  • Mobile first and fully responsive
  • Accessible: keyboard, screen reader and reduced-motion friendly
  • Secure by default: HTTPS, HSTS, strict CSP
  • Fast: self-hosted fonts, no bloat

07 / Credentials

Certifications & Education

Qualys Certified Specialist, Vulnerability Management

Qualys · 2022

IBM Cybersecurity Analyst Professional Certificate

IBM · Coursera

Bachelor of Computer Applications (BCA)

Chaudhary Charan Singh University, Meerut · 2015 – 2018

08 / Writing

I write about vulnerability management and security automation.

Read SecureCyberVM →

09 / Contact

Let’s talk about your next security hire.

Hiring for a senior TVM, Vulnerability Management or Security Automation role? I would like to hear from you.

India (IST, UTC+5:30): –

Your time: –

Overlaps with UK/EU business hours · flexible for US calls