Vulnerability Management Analyst

LT Harper Group; Singapore; Remote; SGD 92,000 - 148,000; Full time

Benefits offered by this job

Fully remote

12-month engagement

Job summary

LT Harper Group is hiring a Vulnerability Management Analyst for a 12-month contract, fully remote from Singapore. You will join a follow-the-sun triage service across APAC, North America and EMEA, triaging disclosed vulnerabilities and determining impact and remediation priorities for client applications and assets.

You will assess exploitability using threat intel and PoC details, assign CVE/CPE/CVSS-based ratings, and document clear rationales for every risk decision.

Qualifications

• Hands-on vulnerability triage and risk assessment across end-to-end workflow.

Responsibilities

• Triage newly disclosed vulnerabilities and assess relevance and impact to customer assets.
• Assess exploitability using threat intel, PoC details, and attack paths.
• Assign severity and risk ratings with clear rationale (CVE, CPE, CVSS).
• Maintain audit-ready case notes for handover across time zones.
• Support business-as-usual triage alongside urgent escalations when critical.

Skills

Vulnerability triage

Risk assessment

Technical writing

CVE/CPE/CVSS

Microsoft

VMware

Oracle/Java

Citrix

F5

Cloud environments

Open-source

Prioritisation

Operations mindset

Job description

Vulnerability Management Analyst | 12-Month Contract | Remote, Singapore

You’ll be one of five analysts forming the APAC shift of a new follow-the-sun vulnerability triage service, running 24 hours a day, five days a week across APAC, North America and EMEA. When a new vulnerability is disclosed, you decide whether it matters to the customer, how much, and why. LT Harper is running this search on behalf of a global technology consulting firm and its enterprise customer.

The essentials

• 100% remote, based in Singapore, covering the APAC shift
• Day rate: on application
• One of 15 analysts across three regions, five per time zone

What you’ll actually do

• Triage newly disclosed vulnerabilities and work out their relevance and impact to the customer’s applications and assets
• Assess exploitability using threat intelligence, exploit and proof of concept (PoC) details, and likely attack paths
• Assign severity and risk ratings mapped to CVE, CPE and CVSS, with a clear rationale behind every rating
• Keep audit-ready case notes that hand over cleanly to colleagues in other time zones
• Support business-as-usual triage alongside urgent escalations when something critical lands

What you’ll need

• Hands-on vulnerability triage and risk assessment across the end-to-end vulnerability management workflow, with fluency in CVE, CPE and CVSS
• The ability to read disclosures, advisories and exploit information and judge the real-world risk
• Clear technical writing, so impact, actions and priorities are easy to act on
• Broad familiarity with enterprise platforms such as Microsoft, VMware, Oracle/Java, Citrix and F5, and how their patch and release cycles work
• Comfort working across cloud environments and large-scale open-source use in enterprise estates
• Strong prioritisation and an operations mindset, able to balance several cases at once

What’s in it for you

• A minimum 12-month engagement helping build a new global service
• Fully remote working
• Daily collaboration with counterparts in North America and EMEA