L2 Vulnerability Management Analyst

Inchcape Digital Limited; Taguig; On-site; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

Supportive Environment

Career Growth

Work-Life Balance

Industry Leadership

Job summary

Inchcape Digital is actively seeking a Level 2 Vulnerability Management Analyst to drive the organisation's vulnerability program across endpoints, servers, cloud environments, apps, and internet-facing assets. You will leverage ASM, CSPM, and automated testing tools to identify and reduce cyber risk, collaborating with technology teams and external testers.

The role requires hands-on experience in vulnerability management, security operations, and familiarity with Tenable/Qualys/Rapid7, plus

Qualifications

• Experience in Vulnerability Management, Security Operations, or Security Engineering.
• Hands-on experience with Tenable (preferred), Qualys, Rapid7, or similar platforms.
• Experience with ASM, DAST/Web Application Scanning, and CSPM technologies.
• Strong understanding of cloud, infrastructure, and application security.
• Experience managing third-party penetration testing and red team activities.
• Knowledge of the CTEM framework and risk-based vulnerability management practices.
• Understanding of CTI and its role in cybersecurity operations.
• Strong analytical, communication, reporting, and stakeholder management skills.

Responsibilities

• Manage and operate the enterprise vulnerability management platform.
• Analyze, validate, prioritize, and track vulnerabilities through remediation.
• Partner with technology teams to coordinate vulnerability remediation efforts.
• Conduct Attack Surface Management (ASM) and external exposure assessments.
• Review findings from Web Application Security Testing and CSPM platforms.
• Administer automated penetration testing and exposure validation tools.
• Coordinate third-party penetration testing and red team engagements.
• Maintain vulnerability dashboards, reporting, and program metrics.
• Support threat analysis and vulnerability response activities.

Skills

Vulnerability Management

Security Operations

Security Engineering

Tenable

Qualys

Rapid7

ASM

DAST/Web App Scanning

CSPM

Cloud Security

Infrastructure Security

Application Security

Third-Party Penetration Testing

Red Team

CTEM

CTI

Analytical Skills

Communication Skills

Stakeholder Management

Tools

Tenable

Qualys

Rapid7

ASM

DAST/Web Application Scanning

CSPM

Job description

Are you looking to accelerate your career path in a stimulating, fast-growing business? At Inchcape, we’re pursuing an exciting strategy to evolve our global business and lead our industry’s transformation.

Join Inchcape Digital, part of Inchcape global network. You’ll explore and develop cutting-edge technology and data solutions that are driving our innovation and unique market position. Thrive as part of a highly collaborative and supportive team of diverse and talented colleagues.

Our Cybersecurity Platform is looking for a Level 2 Vulnerability Management Analyst to be responsible for delivering the organization's Vulnerability Management program across endpoints, servers, cloud environments, applications, and internet-facing assets. This role leverages ASM, Web Application Security Testing, CSPM, and automated penetration testing tools to identify, assess, and reduce cyber risk.

What You'll Do

• Manage and operate the enterprise vulnerability management platform.
• Analyze, validate, prioritize, and track vulnerabilities through remediation.
• Partner with technology teams to coordinate vulnerability remediation efforts.
• Conduct Attack Surface Management (ASM) and external exposure assessments.
• Review findings from Web Application Security Testing and CSPM platforms.
• Administer automated penetration testing and exposure validation tools.
• Coordinate third-party penetration testing and red team engagements.
• Maintain vulnerability dashboards, reporting, and program metrics.
• Support threat analysis and vulnerability response activities.

About you

• Experience in Vulnerability Management, Security Operations, or Security Engineering.
• Hands-on experience with Tenable (preferred), Qualys, Rapid7, or similar platforms.
• Experience with ASM, DAST/Web Application Scanning, and CSPM technologies.
• Strong understanding of cloud, infrastructure, and application security.
• Experience managing third-party penetration testing and red team activities.
• Knowledge of the Continuous Threat Exposure Management (CTEM) framework and risk-based vulnerability management practices.
• Understanding of Cyber Threat Intelligence (CTI) and its role in cybersecurity operations.
• Strong analytical, communication, reporting, and stakeholder management skills.

We offer you

• Supportive Environment: Work alongside a dynamic team committed to your success.
• Career Growth: We're invested in your development and offer ample opportunity for advancement.
• Work-Life Balance: Enjoy a role that balances strategic analysis with day-to-day business support.
• Industry Leadership: Be part of a company that leads the transformation of the automotive distribution industry

Opportunity for everyone

Inchcape is committed to creating an inclusive and diverse workplace where the power of our differences can be embraced and everyone feels they can belong, be themselves and succeed.

About us

Inchcape is the leading global automotive distributor operating in 38 markets. We partner with some of the biggest brands in the business to sustainably power better mobility today and in the future.

Our diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow.

Inchcape Digital employs over 1,300 team members across Colombia and Philippines. Our portfolio includes vehicle distribution for world-renowned brands, market-leading fulfilment solutions, exceptional retail experiences, and tailored financial services.

Additional information request

Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.