Vulnerability Management Analyst II — Cloud & Apps Security

Inchcape Digital Limited; Taguig; On-site; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

Supportive Environment

Career Growth

Work-Life Balance

Industry Leadership

Job summary

Inchcape Digital is actively seeking a Level 2 Vulnerability Management Analyst to drive the organisation's vulnerability program across endpoints, servers, cloud environments, apps, and internet-facing assets. You will leverage ASM, CSPM, and automated testing tools to identify and reduce cyber risk, collaborating with technology teams and external testers.

The role requires hands-on experience in vulnerability management, security operations, and familiarity with Tenable/Qualys/Rapid7, plus

Qualifications

• Experience in Vulnerability Management, Security Operations, or Security Engineering.
• Hands-on experience with Tenable (preferred), Qualys, Rapid7, or similar platforms.
• Experience with ASM, DAST/Web Application Scanning, and CSPM technologies.
• Strong understanding of cloud, infrastructure, and application security.
• Experience managing third-party penetration testing and red team activities.
• Knowledge of the CTEM framework and risk-based vulnerability management practices.
• Understanding of CTI and its role in cybersecurity operations.
• Strong analytical, communication, reporting, and stakeholder management skills.

Responsibilities

• Manage and operate the enterprise vulnerability management platform.
• Analyze, validate, prioritize, and track vulnerabilities through remediation.
• Partner with technology teams to coordinate vulnerability remediation efforts.
• Conduct Attack Surface Management (ASM) and external exposure assessments.
• Review findings from Web Application Security Testing and CSPM platforms.
• Administer automated penetration testing and exposure validation tools.
• Coordinate third-party penetration testing and red team engagements.
• Maintain vulnerability dashboards, reporting, and program metrics.
• Support threat analysis and vulnerability response activities.

Skills

Vulnerability Management

Security Operations

Security Engineering

Tenable

Qualys

Rapid7

ASM

DAST/Web App Scanning

CSPM

Cloud Security

Infrastructure Security

Application Security

Third-Party Penetration Testing

Red Team

CTEM

CTI

Analytical Skills

Communication Skills

Stakeholder Management

Tools

Tenable

Qualys

Rapid7

ASM

DAST/Web Application Scanning

CSPM

Job description

Inchcape Digital is actively seeking a Level 2 Vulnerability Management Analyst to drive the organisation's vulnerability program across endpoints, servers, cloud environments, apps, and internet-facing assets. You will leverage ASM, CSPM, and automated testing tools to identify and reduce cyber risk, collaborating with technology teams and external testers.

The role requires hands-on experience in vulnerability management, security operations, and familiarity with Tenable/Qualys/Rapid7, plus