Level 2 Vulnerability Management Analyst: Attack Surface & Cloud Security

Inchcape; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Benefits offered by this job

Supportive Environment

Career Growth

Work-Life Balance

Industry Leadership

Job summary

Inchcape Digital in the Philippines is seeking a Level 2 Vulnerability Management Analyst to drive our vulnerability program across endpoints, servers, cloud environments, applications, and internet-facing assets. You will leverage ASM, CSPM, and automated testing tools to identify, assess, and reduce cyber risk.

You will manage and operate the vulnerability platform, validate findings, coordinate remediation with technology teams, review Web Application Security Testing results, and maintain

Qualifications

• Experience in Vulnerability Management, Security Operations, or Security Engineering.
• Hands-on experience with Tenable, Qualys, Rapid7, or similar platforms.
• Experience with ASM, DAST/Web Application Scanning, and CSPM technologies.
• Strong understanding of cloud, infrastructure, and application security.
• Experience managing third-party penetration testing and red team activities.
• Knowledge of the CTEM framework and risk-based vulnerability management practices.
• Understanding of CTI and its role in cybersecurity operations.

Responsibilities

• Manage and operate the enterprise vulnerability management platform.
• Analyze, validate, prioritize, and track vulnerabilities through remediation.
• Partner with technology teams to coordinate vulnerability remediation efforts.
• Conduct ASM and external exposure assessments.
• Review findings from Web Application Security Testing and CSPM platforms.
• Administer automated penetration testing and exposure validation tools.
• Coordinate third-party penetration testing and red team engagements.
• Maintain vulnerability dashboards, reporting, and program metrics.
• Support threat analysis and vulnerability response activities.

Skills

Vulnerability Management

Security Operations

Security Engineering

Tenable

Qualys

Rapid7

ASM

CSPM

DAST

CTI

Threat Intelligence

Cloud Security

Stakeholder Management

Tools

Tenable

Qualys

Rapid7

Job description

Inchcape Digital in the Philippines is seeking a Level 2 Vulnerability Management Analyst to drive our vulnerability program across endpoints, servers, cloud environments, applications, and internet-facing assets. You will leverage ASM, CSPM, and automated testing tools to identify, assess, and reduce cyber risk.

You will manage and operate the vulnerability platform, validate findings, coordinate remediation with technology teams, review Web Application Security Testing results, and maintain