Vulnerability Management Analyst: Drive Remediation

Inchcape Philippines; Philippines; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Supportive Environment

Career Growth

Work-Life Balance

Industry Leadership

Job summary

Inchcape Philippines is seeking a Level 2 Vulnerability Management Analyst to lead our Vulnerability Management program across endpoints, servers, cloud, applications, and internet-facing assets. You will leverage ASM, DAST, CSPM, and automated testing tools to identify and reduce cyber risk.

The role requires hands-on experience in vulnerability management, security operations, and cloud security, with strong analytical and stakeholder communication skills.

Qualifications

• Hands-on experience with vulnerability management across endpoints, servers, and cloud.
• Familiarity with ASM, DAST, CSPM technologies.
• Ability to analyse, prioritize, and track remediation with stakeholders.
• Knowledge of CTEM framework and threat intelligence in security operations.

Responsibilities

• Manage and operate the vulnerability management platform.
• Analyze, validate, prioritize, and track vulnerabilities through remediation.
• Coordinate remediation with technology teams.
• Conduct ASM and external exposure assessments.
• Review findings from security testing platforms.
• Administer automated testing and exposure validation tools.
• Coordinate third-party testing and red team engagements.
• Maintain dashboards, reporting, and program metrics.
• Support threat analysis and vulnerability response activities.

Skills

Vulnerability Management

Security Operations

Security Engineering

Cloud Security

CTI & CTEM knowledge

Stakeholder communication

Tools

Tenable

Qualys

Rapid7

DAST/Web App Scanning

CSPM

Job description

Inchcape Philippines is seeking a Level 2 Vulnerability Management Analyst to lead our Vulnerability Management program across endpoints, servers, cloud, applications, and internet-facing assets. You will leverage ASM, DAST, CSPM, and automated testing tools to identify and reduce cyber risk.

The role requires hands-on experience in vulnerability management, security operations, and cloud security, with strong analytical and stakeholder communication skills.