Principal Systems Engineer 1 1

Boehringer Ingelheim; Muntinlupa; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Boehringer Ingelheim is seeking a Network Vulnerability Management Engineer to own and operate the enterprise vulnerability-management platform, performing hands-on analysis and coordinating remediation with infrastructure teams.

The role emphasizes platform ownership, vulnerability assessment, reporting, and automation through Python, as part of the CISOC team in a global, multicultural environment.

Qualifications

• Strong hands-on experience in infrastructure or network vulnerability management.
• Experience with Qualys VMDR or similar enterprise vulnerability-scanning platform.
• Ability to investigate findings and prove false positives or true positives with technical evidence.
• Solid knowledge of TCP/IP, operating systems, network services, authentication, asset discovery, vulnerability identifiers and remediation principles.
• Python experience for automation, API integration, data analysis and reporting.
• Experience managing a security platform as System Lead, service owner or senior technical administrator is highly desirable.
• ServiceNow Vulnerability Response, SecOps or general ServiceNow knowledge is highly valuable but not mandatory.
• Strong analytical, troubleshooting, documentation and problem-solving skills.
• Excellent spoken and written English and experience working in an international, multicultural environment.

Responsibilities

• As a member of CISOC, own and improve the network vulnerability-management platform and its operation.
• Plan and monitor internal vulnerability scans; investigate coverage gaps and authentication issues.
• Analyse findings to validate true positives or false positives with evidence and rationale.
• Assess severity, exploitability, exposure and business context to prioritize remediation.
• Drive the vulnerability reporting process and track findings to remediation teams.
• Develop and maintain Python automation for platform administration, data processing and reporting.
• Coordinate rescans and vendor support cases as needed.
• Follow BI processes and maintain compliance and audit documentation.

Skills

Vulnerability management

Qualys VMDR

Python automation

System Lead experience

ServiceNow knowledge

TCP/IP networking

Vulnerability analysis

English communication

Documentation

Tools

Qualys Vulnerability Management

Job description

Join Boehringer Ingelheim's Cyber Intelligence & Security Operations Center (CISOC) as a Network Vulnerability Management Engineer. In this role, you will serve as the technical owner and subject matter expert for the organization's network vulnerability management platform, ensuring effective identification, assessment, reporting, and remediation of infrastructure vulnerabilities across the enterprise.

You will combine platform ownership responsibilities with hands-on technical analysis, working closely with infrastructure teams, System Leads, remediation teams, and service management stakeholders to strengthen BI's security posture through continuous improvement of vulnerability management processes and technologies.

The Position

Join Boehringer Ingelheim's Cyber Intelligence & Security Operations Center (CISOC) as a Network Vulnerability Management Engineer. In this role, you will serve as the technical owner and subject matter expert for the organization's network vulnerability management platform, ensuring effective identification, assessment, reporting, and remediation of infrastructure vulnerabilities across the enterprise.

You will combine platform ownership responsibilities with hands-on technical analysis, working closely with infrastructure teams, System Leads, remediation teams, and service management stakeholders to strengthen BI's security posture through continuous improvement of vulnerability management processes and technologies.

Duties & Responsibilities

As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, the role will be responsible for technical ownership, operation and continuous improvement of network vulnerability management. The system mainly supports internal network vulnerability scanning and the reporting of identified vulnerabilities. The engineer will combine platform ownership with hands-on technical vulnerability analysis. Key responsibilities:

• System Lead role, including service roadmap, lifecycle, configuration standards, access governance, documentation and continuous improvement
• Administer and maintain the vulnerability-management platform, including scanners, scanning scope, schedules, asset inventory, tags, authentication and scan quality
• Plan and monitor regular internal network vulnerability scans and investigate coverage gaps, failed scans, authentication issues and unexpected results
• Analyse vulnerability findings in technical depth and validate whether detections are true positives or false positives, documenting clear evidence and rationale
• Assess vulnerability severity, exploitability, exposure and business context to support prioritisation and escalation decisions
• Drive the vulnerability reporting process, ensuring findings are correctly enriched, assigned, tracked and communicated to System Leads and remediation teams
• Coordinate rescans and verification activities to confirm remediation or support exception and false-positive decisions
• Develop and maintain Python automation for platform administration, data processing, quality checks, enrichment, reporting and workflow improvement
• Collaborate with ITSM stakeholders to improve vulnerability-ticket creation, assignment, lifecycle, integrations and reporting
• Act as technical escalation point for vulnerability-management issues and coordinate vendor support cases when required
• Follow BI processes and maintain the required operational, compliance and audit documentation

Requirements:

An ideal candidate will have

• Strong hands-on experience in infrastructure or network vulnerability management and technical vulnerability assessment
• Practical experience with Qualys VMDR, Qualys Vulnerability Management or a comparable enterprise vulnerability-scanning platform
• Ability to investigate findings and prove false positives or true positives using technical evidence, including service, version, configuration and network analysis
• Solid knowledge of TCP/IP, operating systems, network services, authentication, asset discovery, vulnerability identifiers and remediation principles
• Python experience for automation, API integration, data analysis and reporting
• Experience managing a security platform as System Lead, service owner or senior technical administrator is highly desirable
• ServiceNow Vulnerability Response, SecOps or general ServiceNow knowledge is highly valuable but not mandatory
• Strong analytical, troubleshooting, documentation and problem-solving skills
• Excellent spoken and written English and experience working in an international, multicultural environment
• Relevant security certifications are desirable but not mandatory

Our Company

Boehringer Ingelheim is a biopharmaceutical company active in both human and animal health. As one of the industry's top investors in research and development, the company focuses on developing innovative therapies that can improve and extend lives in areas of high unmet medical need. Independent since its foundation in 1885, Boehringer takes a long-term perspective, embedding sustainability along the entire value chain. Our approximately 54,300 employees serve over 130 markets to build a healthier and more sustainable tomorrow. Learn more at www.boehringer-ingelheim.com.

Why Boehringer Ingelheim?

With us, you can develop your own path in a company with a culture that knows our differences are our strengths - and break new ground in the drive to make millions of lives better.

Here, your development is our priority. Supporting you to build a career as part of a workplace that is independent, authentic and bold, while tackling challenging work in a respectful and friendly environment where everyone is valued and welcomed.

Alongside, you have access to programs and groups that ensure your health and wellbeing are looked after - as we make major investments to drive global accessibility to healthcare. By being part of a team that is constantly innovating, you'll be helping to transform lives for generations.

Want to learn more? Visit https://www.boehringer-ingelheim.com