
Open for applications
About this role
Key Responsibilities
Administer and maintain the vulnerability management platform, ensuring scan coverage, asset visibility and data accuracy across the attack surface
Build remediation workflows that automate ticketing, SLA tracking and owner assignment, integrated with ITSM platforms
Define and manage scanning schedules, credentialed scan policies and asset group configurations across on-prem, cloud and hybrid environments
Triage and prioritise vulnerabilities using risk-based scoring, incorporating threat intelligence, asset criticality and exploitability context
Engage product owners and asset custodians to drive timely remediation, tracking SLAs and escalating aged or critical findings through governance channels
Develop and maintain reporting — executive dashboards, operational metrics and trend analysis — tailored to different audiences
Define and maintain vulnerability management policy, standards and exception handling processes aligned to organisational risk appetite and compliance frameworks
Mentor and upskill other engineers through documentation, training and informal support
Coordinate the threat intelligence program, enriching vulnerability data with known exploitation activity, adversary TTPs and emerging advisories
Develop SOPs, support documentation and automation scripts to ensure consistent, high-quality operations
Support penetration testing and red team activities with vulnerability context and remediation status
Evaluate and implement improvements to scan architecture, including authenticated scanning, agent-based deployment, and API integrations with CMDB, ITSM and SOAR platforms