VAPT Lead: Vulnerability Management & Automation

SM Investments; Pasay; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

SM Investments seeks a Cyber Security Vulnerability professional to lead vulnerability management and remediation across our organization’s retail, banking, and property platforms.

You will drive assessments, automation initiatives, threat monitoring, and risk analysis to maintain a secure, compliant environment. Strong communication and development experience are a plus as you collaborate with cross-functional teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• At least 5 years of relevant experience.
• Strong understanding of security principles, vulnerability management, and risk analysis.
• Familiarity with vulnerability assessment tools, threat intelligence, and automation.

Responsibilities

• Lead daily infrastructure and application vulnerability scanning and onboarding.
• Analyze scan results, prepare reports, and coordinate timely remediation.
• Conduct policy compliance scans and maintain updated security records.
• Identify opportunities to automate security processes and develop automation initiatives.
• Perform feasibility studies for new security measures and track threat intel and industry trends.
• Handle risk assessments for new apps, architectures, and exemption requests (WAF, Snyk, whitelisting).
• Provide recommendations to mitigate identified risks.
• Manage policy configuration, onboarding, firewall rule reviews, and password audits.
• Coordinate remediation activities across teams.

Skills

Security principles

Vulnerability management

Risk analysis

Automation familiarity

Threat intelligence

Communication

Analytical thinking

Problem solving

Development experience

Security certifications

Education

Bachelor’s degree in Computer Science/Information Security

Tools

WAF

Snyk

Vulnerability scanners

Job description

SM Investments seeks a Cyber Security Vulnerability professional to lead vulnerability management and remediation across our organization’s retail, banking, and property platforms.

You will drive assessments, automation initiatives, threat monitoring, and risk analysis to maintain a secure, compliant environment. Strong communication and development experience are a plus as you collaborate with cross-functional teams.