Senior Vulnerability Management & Automation Engineer

EY GDS

Philippines

On-site

PHP 900,000 - 1,600,000

Full time

2 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

EY GDS in the Cybersecurity domain seeks a Senior Vulnerability Management Engineer to support enterprise vulnerability management programs across infrastructure, cloud, databases, and apps. You will lead assessments, provide remediation guidance, and drive automation through Python/PowerShell scripting.

You’ll collaborate with client stakeholders and cybersecurity teams to communicate risks and improve the vulnerability management lifecycle.

Qualifications

Bachelor’s or postgraduate degree in Computer Science, Information Systems, Engineering, Business, or a related field.
At least 3 years of relevant cybersecurity experience, particularly in vulnerability management, vulnerability assessment, and/or penetration testing.
Hands‑on experience with enterprise vulnerability management tools.
Relevant certifications such as CEH, Qualys certification, or CISM.
Willingness to work in shifts as required.

Responsibilities

Support and manage enterprise vulnerability management programs using Qualys, Nexpose/InsightVM, Tenable.
Perform vulnerability assessments across infrastructure, cloud-hosted systems, databases, web services, and applications.
Manage vulnerability exemption processes and support risk-based remediation decisions.
Deploy, configure, operate, and optimize vulnerability management tools.
Analyze vulnerability findings, identify root causes, and provide remediation recommendations.
Identify security weaknesses and assess their impact and exploitability.
Provide technical guidance to junior team members on vulnerability management and risk practices.
Research emerging vulnerabilities, exploits, attack vectors, and lifecycle developments.
Support security assessments involving OS, networks, web apps, and cloud environments.
Drive operational efficiency through Python/PowerShell scripting, automation, reporting, and standardization.
Collaborate with client stakeholders and cybersecurity teams to communicate risks and priorities.
Contribute to knowledge-sharing initiatives and cybersecurity thought leadership.