Cybersecurity Engineer (Vulnerability Management)

SEATRIUM (SG) PTE. LTD.; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm in Singapore is seeking a professional to oversee vulnerability management activities, perform vulnerability scans, and collaborate with IT teams to ensure security best practices. The ideal candidate has over 2 years of experience in cybersecurity, familiarity with vulnerability scanning tools, and a Bachelor's degree in a relevant field. This role offers comprehensive engagement in a fast-paced environment, ensuring effective vulnerability remediation and compliance.

Qualifications

• 2+ years of experience in cybersecurity focusing on vulnerability management.
• Hands-on experience with vulnerability scanning tools required.
• Strong understanding of common vulnerabilities and threat landscape.

Responsibilities

• Lead vulnerability management activities across systems and applications.
• Perform regular vulnerability scans and ensure timely remediation.
• Research the latest vulnerabilities and communicate risks to stakeholders.

Skills

Vulnerability management

Patch management

Analytical skills

Communication skills

Education

Bachelor’s degree in Computer Science

Tools

Tenable

Qualys

Rapid7

Job description

Responsibilities

• Lead vulnerability management activities, including identification, assessment, prioritization, and remediation tracking of security vulnerabilities across systems, applications, and infrastructure.
• Perform regular vulnerability scans using industry-standard tools (e.g., Tenable, Qualys, Rapid7) and ensure findings are analyzed and addressed in a timely manner.
• Collaborate with IT, DevOps, and application teams to remediate vulnerabilities and implement security best practices.
• Develop and maintain vulnerability management policies, procedures, and reporting processes.
• Provide technical expertise in patch management, configuration management, and secure baseline enforcement.
• Research and stay updated on the latest vulnerabilities, exploits, and security advisories, and communicate relevant risks to stakeholders.
• Conduct root cause analysis for recurring or high-risk vulnerabilities and recommend long-term mitigation strategies.
• Prepare and deliver metrics, dashboards, and executive-level reports on vulnerability posture and remediation progress.
• Support compliance efforts by aligning vulnerability management with frameworks such as NIST, ISO 27001, and regulatory requirements.

Requirements

• 2+ years of experience in cybersecurity, with a focus on vulnerability management, patch management, or system hardening.
• Hands-on experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7) and knowledge of remediation workflows.
• Strong understanding of common vulnerabilities (CVEs, CVSS scoring), threat landscape, and risk prioritization.
• Familiarity with operating systems (Windows, Linux), cloud platforms, and networking fundamentals.
• Knowledge of security frameworks and standards (NIST, CIS Benchmarks, ISO 27001).
• Excellent problem-solving, analytical, and communication skills.
• Ability to work cross-functionally with technical and non-technical teams.
• Relevant certifications (e.g., CompTIA Security+, CEH, CISSP, GIAC GSEC, or Tenable/Qualys certifications) are a plus.

Education

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Our Addresses and Working Hours

Seatrium Limited

(Pioneer Yard)

50 Gul Road, Singapore 629353

(Islandwide transport provided)

Mon - Fri: 7:30am - 5:30pm

Interested candidates are invited to send us an updated resume with your current and expected salary and earliest availability.

We regret that only shortlisted candidates will be notified.

Please note that your personal data disclosed to Seatrium Limited and our group of companies, shall be used for the purposes of evaluation, and processing in accordance with our recruitment processes and policies. By providing your personal data, you have consented to the aforesaid purpose under the provisions of the Personal Data Protection Act 2012.