Automation Vulnerability Management Engineer - 1 year contract

GMP TECHNOLOGIES (S) PTE LTD; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

GMP Technologies (S) Pte Ltd in Singapore is seeking an experienced IT security professional to manage the end-to-end Vulnerability Management lifecycle across our environments. You will configure and maintain scanning tools (Tenable Security Center, Nessus, Qualys), run scheduled scans, perform risk-based assessments, and drive remediation with infrastructure, network, and application teams.

This role requires the ability to work in a fast-paced, shift-based setting and to produce clear

Qualifications

• Bachelor's degree in CS, IT or related field.
• 5–8 years IT experience, incl. 3–5 years in IT Security / Vulnerability Management.
• Hands-on with Tenable Security Center, Nessus or Qualys.
• Strong OS knowledge (Windows/Linux) and network basics.
• Experience in operations / production environments.
• Familiar with ITIL processes and reporting tools.
• Good communication and stakeholder management abilities.

Responsibilities

• Manage end-to-end Vulnerability Management lifecycle.
• Configure and maintain vulnerability scanning tools (Tenable, Nessus, Qualys).
• Ensure scheduled scans are executed; investigate failures and re-run.
• Perform asset discovery and onboarding into VM tools.
• Conduct risk-based vulnerability assessments and prioritise remediation.
• Work with Infrastructure, Network, and Application teams to drive remediation.
• Manage false positives and risk acceptance with stakeholders.
• Maintain dashboards and reporting for technical teams and management.
• Support penetration testing remediation tracking.
• Monitor emerging threats and conduct ad-hoc exposure assessments.
• Drive process improvements and ensure compliance with internal security policies.
• Prepare regular security reports (weekly / monthly / ad-hoc).

Skills

Vulnerability management

Risk assessment

Security tooling

ITIL processes

Stakeholder management

Dashboards / Power BI

Windows & Linux OS

Communication

Education

Bachelor's Degree in Computer Science / IT

Tools

Tenable Security Center

Nessus

Qualys

Job description

Responsibilities

• Manage theend-to-end Vulnerability Management lifecycle(scan, assess, prioritise, remediate, report)
• Configure and maintain vulnerability scanning tools (e.g. **Tenable Security Center / Nessus)
• Ensurescheduled scans are executed, investigate failures, and re-run where required
• Performasset discovery and onboardinginto vulnerability management tools
• Conductrisk-based vulnerability assessmentsand prioritise remediation actions
• Work closely with Infrastructure, Network, and Application teams todrive remediation
• Managefalse positives and risk acceptance, including stakeholder coordination
• Maintaindashboards and reportingfor technical teams and management
• Supportpenetration testing remediation tracking
• Monitor emerging threats and conductad-hoc exposure assessments
• Driveprocess improvementsand ensure compliance with internal security policies
• Prepareregular security reports(weekly / monthly / ad-hoc)

Requirements

• Bachelor's Degree in Computer Science, IT, or related field
• 5 to 8 years of IT experience, including at least 3 to 5 years inIT Security / Vulnerability Management
• Hands-on experience withTenable Security Center or similar tools (e.g. Nessus, Qualys)
• Strong understanding of Operating Systems (Windows, Linux), Networks and basic application security concepts
• Experience working inoperations / production environments
• Ability to performrisk assessment and prioritisation
• Familiar withITIL processes
• Good reporting and documentation skills (Excel, PowerPoint; Power BI is a plus)
• Strong communication and stakeholder management skills
• Able to work independently in afast-paced, shift-based environment

Good to Have

• Certifications such asCertified Information Systems Security Professional (CISSP), GIAC Enterprise Vulnerability Assessor (GEVA)
• Exposure to financial services / banking environment
• Basic scripting knowledge (PowerShell, Bash)
• Experience with dashboards (e.g. Power BI)

Additional info

• This role is offered on a yearly renewable contract basis.
• Able to support rotational shift scheduled based on duty roaster (Europe and/or Asia time zone).
• Able to provide on-call support during non-business hours/and or on weekends.

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239