Vulnerability Management Engineer - Remote Advisory Lead

Workstreet; Philippines; Remote; PHP 3,781,000 - 5,671,000; Full time

Benefits offered by this job

Remote-first culture

Career development

Technical training

Competitive compensation

Job summary

Workstreet is seeking a consultative and hands-on Vulnerability Management Engineer to join our Delivery team. You will act as the primary security advisor for an assigned portfolio of fast-growth startups, guiding them to identify, prioritize, and fix risks across cloud and on‑prem environments.

You will combine scanning infrastructure management with high-touch client advisory, surfacing critical vulnerabilities and working directly with client IT and DevOps to deploy patches where they live

Qualifications

• Proven enterprise vulnerability engineer with hands-on experience configuring and operating vulnerability platforms.
• Strong ability to prioritize risks using CVSS/EPSS and deliver clear business risk metrics.
• Experience in patch management and coordinating remediation with client IT and DevOps teams.

Responsibilities

• Orchestrate Vulnerability Scanning Infrastructure across client networks and cloud environments.
• Execute Threat Analysis and Risk Prioritization to surface critical findings.
• Drive Collaborative Remediation and Governance with client engineers to accelerate patching timelines.
• Manage Exceptions and Audit Compliance, mapping patch data to control evidence for audits.
• Own the Advisory Client Experience as the main security advisor for a portfolio of startups.

Skills

Vulnerability scanning

Risk prioritization

Patch management

Cloud security

Client advisory

Security analytics

Regulatory frameworks

Tools

Tenable/Nessus

Qualys

Rapid7 InsightVM

Vanta

Job description

Workstreet is seeking a consultative and hands-on Vulnerability Management Engineer to join our Delivery team. You will act as the primary security advisor for an assigned portfolio of fast-growth startups, guiding them to identify, prioritize, and fix risks across cloud and on‑prem environments.

You will combine scanning infrastructure management with high-touch client advisory, surfacing critical vulnerabilities and working directly with client IT and DevOps to deploy patches where they live