CTEM-Driven Vulnerability Operations Engineer

Ensign InfoSecurity; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Ensign InfoSecurity is seeking a Vulnerability Ops Engineer to drive enterprise vulnerability management and evolve it toward Continuous Threat Exposure Management. You’ll coordinate remediation across on‑premise, cloud, and applications, with emphasis on risk-based prioritisation and automation.

You will leverage frontier AI models to accelerate vulnerability research and maintain validation discipline, while reporting progress to senior leadership.

Qualifications

• Degree in Cybersecurity, Computer Science, Information Systems, or an equivalent technical field of study.
• Minimum 3 years of experience in vulnerability management, security operations, or exposure management.
• Hands-on experience with enterprise vulnerability management platforms (Tenable strongly preferred).
• Strong foundation in vulnerability management methodologies and risk-based prioritisation (CVE, CVSS, KEV, EPSS).
• Strong understanding of cloud environments and familiarity with CSPM tooling.
• Experience managing remediation through ticketing workflows (Jira/Jira Service Management or equivalent).
• Experience with frontier AI models and demonstrated ability to conduct AI-assisted vulnerability research and automation.
• Proficiency in scripting and automation to integrate security platforms and streamline operations.
• Clear written and verbal communication skills for cross-team coordination and reporting.

Responsibilities

• Operate and continuously improve vulnerability management platforms across on-premise, cloud, and applications.
• Drive Continuous Threat Exposure Management by scoping attack surfaces and mobilising remediation through workflows.
• Prioritise exposures using risk-based methods and assess threat intel and exploit code.
• Monitor and remediate cloud misconfigurations with CSPM tooling with infra partners.
• Reconcile assets with the asset register and report coverage and risks.
• Coordinate remediation between system owners, operations, and external vendors, track SLAs.
• Leverage AI models to accelerate research, root-cause analysis and workflow efficiency.
• Provide management reporting on remediation performance and exposure metrics.

Skills

Vulnerability management

Security operations

Exposure management

Cloud security

Automation

Scripting

Communication

AI-assisted security

Education

Bachelor's in Cybersecurity/CS/Info Systems

Tools

Tenable

Jira/Jira Service Management

Git

Docker

Kubernetes

Anthropic/OpenAI tooling

Job description

Ensign InfoSecurity is seeking a Vulnerability Ops Engineer to drive enterprise vulnerability management and evolve it toward Continuous Threat Exposure Management. You’ll coordinate remediation across on‑premise, cloud, and applications, with emphasis on risk-based prioritisation and automation.

You will leverage frontier AI models to accelerate vulnerability research and maintain validation discipline, while reporting progress to senior leadership.