Vulnerability Risk Analyst I/II - CVE & Remediation

SCALABLE OS CORP.; Manila; Remote; PHP 480,000 - 960,000; Full time

Job summary

SCALABLE OS CORP. in Manila is seeking a detail-oriented Vulnerability Analyst I / II to join our cybersecurity team.

You will research vulnerabilities, evaluate CVEs, prioritize risks, and coordinate patch cycles across Windows environments. You will prepare clear reports for technical and non-technical audiences, communicate high-risk findings to clients, and support remediation with our security tools, leveraging the NIST framework and MITRE ATT&CK to translate complex issues into actionable

Qualifications

• Hands-on experience with vulnerability management and risk assessment.
• Knowledge of NIST Cybersecurity Framework and its application to vulnerability management.
• Understanding of MITRE ATT&CK framework and common attack techniques.
• Ability to evaluate CVEs and determine potential impact.
• Familiarity with vulnerability management or security assessment tools.
• Strong knowledge of Microsoft Windows environments and related servers/endpoints.
• Excellent written and verbal communication skills.
• Ability to translate vulnerabilities into business risks for technical and non-technical audiences.
• Strong attention to detail and time-management skills.

Responsibilities

• Research and analyze vulnerabilities, CVEs, exploits, and threats.
• Assess severity and potential business impact of vulnerabilities.
• Identify affected systems within Microsoft Windows environments.
• Review existing controls for mitigating protection.
• Prioritize vulnerabilities based on risk and business impact.
• Recommend patches, configuration changes, or compensating controls.
• Coordinate with internal teams and clients on remediation and patch cycles.
• Prepare clear vulnerability reports and remediation recommendations.
• Communicate high-risk vulnerabilities and business impact to clients.
• Support vulnerability management activities using security tools.

Skills

Vulnerability management

Risk assessment

CVE evaluation

Security reporting

Communication skills

Time management

Tools

Connect Secure

Job description

SCALABLE OS CORP. in Manila is seeking a detail-oriented Vulnerability Analyst I / II to join our cybersecurity team.

You will research vulnerabilities, evaluate CVEs, prioritize risks, and coordinate patch cycles across Windows environments. You will prepare clear reports for technical and non-technical audiences, communicate high-risk findings to clients, and support remediation with our security tools, leveraging the NIST framework and MITRE ATT&CK to translate complex issues into actionable