Level 2 Vulnerability Management Analyst

Inchcape; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Benefits offered by this job

Supportive Environment

Career Growth

Work-Life Balance

Industry Leadership

Job summary

Inchcape Digital in the Philippines is seeking a Level 2 Vulnerability Management Analyst to drive our vulnerability program across endpoints, servers, cloud environments, applications, and internet-facing assets. You will leverage ASM, CSPM, and automated testing tools to identify, assess, and reduce cyber risk.

You will manage and operate the vulnerability platform, validate findings, coordinate remediation with technology teams, review Web Application Security Testing results, and maintain

Qualifications

• Experience in Vulnerability Management, Security Operations, or Security Engineering.
• Hands-on experience with Tenable, Qualys, Rapid7, or similar platforms.
• Experience with ASM, DAST/Web Application Scanning, and CSPM technologies.
• Strong understanding of cloud, infrastructure, and application security.
• Experience managing third-party penetration testing and red team activities.
• Knowledge of the CTEM framework and risk-based vulnerability management practices.
• Understanding of CTI and its role in cybersecurity operations.

Responsibilities

• Manage and operate the enterprise vulnerability management platform.
• Analyze, validate, prioritize, and track vulnerabilities through remediation.
• Partner with technology teams to coordinate vulnerability remediation efforts.
• Conduct ASM and external exposure assessments.
• Review findings from Web Application Security Testing and CSPM platforms.
• Administer automated penetration testing and exposure validation tools.
• Coordinate third-party penetration testing and red team engagements.
• Maintain vulnerability dashboards, reporting, and program metrics.
• Support threat analysis and vulnerability response activities.

Skills

Vulnerability Management

Security Operations

Security Engineering

Tenable

Qualys

Rapid7

ASM

CSPM

DAST

CTI

Threat Intelligence

Cloud Security

Stakeholder Management

Tools

Tenable

Qualys

Rapid7

Job description

Are you looking to accelerate your career path in a stimulating, fast-growing business? At Inchcape, we’re pursuing an exciting strategy to evolve our global business and lead our industry’s transformation.Join **Inchcape Digital**, part of Inchcape global network. You’ll explore and develop cutting-edge technology and data solutions that are driving our innovation and unique market position. Thrive as part of a highly collaborative and supportive team of diverse and talented colleagues.Our Cybersecurity Platform is looking for a **Level 2 Vulnerability Management Analyst** to be responsible for delivering the organization's Vulnerability Management program across endpoints, servers, cloud environments, applications, and internet-facing assets. This role leverages ASM, Web Application Security Testing, CSPM, and automated penetration testing tools to identify, assess, and reduce cyber risk.### What You'll Do* Manage and operate the enterprise vulnerability management platform.* Analyze, validate, prioritize, and track vulnerabilities through remediation.* Partner with technology teams to coordinate vulnerability remediation efforts.* Conduct Attack Surface Management (ASM) and external exposure assessments.* Review findings from Web Application Security Testing and CSPM platforms.* Administer automated penetration testing and exposure validation tools.* Coordinate third-party penetration testing and red team engagements.* Maintain vulnerability dashboards, reporting, and program metrics.* Support threat analysis and vulnerability response activities.**About you*** Experience in Vulnerability Management, Security Operations, or Security Engineering.* Hands-on experience with Tenable (preferred), Qualys, Rapid7, or similar platforms.* Experience with ASM, DAST/Web Application Scanning, and CSPM technologies.* Strong understanding of cloud, infrastructure, and application security.* Experience managing third-party penetration testing and red team activities.* Knowledge of the Continuous Threat Exposure Management (CTEM) framework and risk-based vulnerability management practices.* Understanding of Cyber Threat Intelligence (CTI) and its role in cybersecurity operations.* Strong analytical, communication, reporting, and stakeholder management skills.**We offer you*** Supportive Environment: Work alongside a dynamic team committed to your success.* Career Growth: We're invested in your development and offer ample opportunity for advancement.* Work-Life Balance: Enjoy a role that balances strategic analysis with day-to-day business support.* Industry Leadership: Be part of a company that leads the transformation of the automotive distribution industry**Start your journey**Worried that you don’t meet all the criteria exactly? We encourage you to apply! Your skills and perspectives may be the perfect fit for this role or another opportunity within our business.**Opportunity for everyone**Inchcape is committed to creating an inclusive and diverse workplace where the power of our differences can be embraced and everyone feels they can belong, be themselves and succeed.**About us**Inchcape is the leading global automotive distributor operating in 38 markets. We partner with some of the biggest brands in the business to sustainably power better mobility today and in the future.Our diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow.Inchcape Digital employs over 1,300 team members across Colombia and Philippines. Our portfolio includes vehicle distribution for world-renowned brands, market-leading fulfilment solutions, exceptional retail experiences, and tailored financial services.**Additional information request**Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.