Principal Systems Engineer 1 1

Boehringer Ingelheim GmbH; Philippines; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

Boehringer Ingelheim GmbH is seeking a Network Vulnerability Management Engineer to own and enhance the enterprise vulnerability-management platform within CISOC. The role combines platform ownership with hands-on vulnerability analysis, coordinating with infrastructure teams and remediation teams to strengthen BI's security posture.

The ideal candidate will have practical experience with vulnerability scanning platforms, Python automation, and strong understanding of network protocols,

Qualifications

• Strong hands-on experience in infrastructure or network vulnerability management.
• Experience with Qualys VMDR or similar enterprise vulnerability-scanning platforms.
• Ability to prove true/false positives with technical evidence.
• Solid knowledge of TCP/IP, operating systems, and remediation principles.
• Python experience for automation, data analysis and reporting.
• ServiceNow knowledge is valuable but not mandatory.

Responsibilities

• Own and operate the network vulnerability-management platform.
• Plan, monitor and investigate internal network vulnerability scans.
• Analyze findings and document evidence for true/false positives.
• Assess severity and prioritise remediation efforts.
• Drive reporting, enrichment, assignment and remediation coordination.
• Develop Python automation for platform administration and reporting.
• Collaborate with ITSM and remediation teams; act as escalation point.

Skills

Vulnerability management

Network security

Python automation

Technical analysis

Documentation

Tools

Qualys VMDR

Qualys Vulnerability Management

ServiceNow

Job description

Join Boehringer Ingelheim's Cyber Intelligence & Security Operations Center (CISOC) as a Network Vulnerability Management Engineer. In this role, you will serve as the technical owner and subject matter expert for the organization's network vulnerability management platform, ensuring effective identification, assessment, reporting, and remediation of infrastructure vulnerabilities across the enterprise.

You will combine platform ownership responsibilities with hands-on technical analysis, working closely with infrastructure teams, System Leads, remediation teams, and service management stakeholders to strengthen BI's security posture through continuous improvement of vulnerability management processes and technologies.

Duties & Responsibilities

As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, the role will be responsible for technical ownership, operation and continuous improvement of network vulnerability management. The system mainly supports internal network vulnerability scanning and the reporting of identified vulnerabilities. The engineer will combine platform ownership with hands-on technical vulnerability analysis. Key responsibilities:

• System Lead role, including service roadmap, lifecycle, configuration standards, access governance, documentation and continuous improvement.
• Administer and maintain the vulnerability-management platform, including scanners, scanning scope, schedules, asset inventory, tags, authentication and scan quality.
• Plan and monitor regular internal network vulnerability scans and investigate coverage gaps, failed scans, authentication issues and unexpected results.
• Analyse vulnerability findings in technical depth and validate whether detections are true positives or false positives, documenting clear evidence and rationale.
• Assess vulnerability severity, exploitability, exposure and business context to support prioritisation and escalation decisions.
• Drive the vulnerability reporting process, ensuring findings are correctly enriched, assigned, tracked and communicated to System Leads and remediation teams.
• Coordinate rescans and verification activities to confirm remediation or support exception and false-positive decisions.
• Develop and maintain Python automation for platform administration, data processing, quality checks, enrichment, reporting and workflow improvement.
• Collaborate with ITSM stakeholders to improve vulnerability-ticket creation, assignment, lifecycle, integrations and reporting.
• Act as technical escalation point for vulnerability-management issues and coordinate vendor support cases when required.
• Follow BI processes and maintain the required operational, compliance and audit documentation.

Requirements:

An ideal candidate will have

• Strong hands-on experience in infrastructure or network vulnerability management and technical vulnerability assessment.
• Practical experience with Qualys VMDR, Qualys Vulnerability Management or a comparable enterprise vulnerability-scanning platform.
• Ability to investigate findings and prove false positives or true positives using technical evidence, including service, version, configuration and network analysis.
• Solid knowledge of TCP/IP, operating systems, network services, authentication, asset discovery, vulnerability identifiers and remediation principles.
• Python experience for automation, API integration, data analysis and reporting.
• Experience managing a security platform as System Lead, service owner or senior technical administrator is highly desirable.
• ServiceNow Vulnerability Response, SecOps or general ServiceNow knowledge is highly valuable but not mandatory.
• Strong analytical, troubleshooting, documentation and problem-solving skills.
• Excellent spoken and written English and experience working in an international, multicultural environment.
• Relevant security certifications are desirable but not mandatory.