Vulnerability Management Engineer (Cyber Security / Tenable)

GMP Technologies; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

GMP Technologies Singapore is seeking a Vulnerability Management Engineer to own end-to-end lifecycle using Tenable and other tools. You will manage scans, risk-based prioritisation, remediation tracking, and dashboards for technical teams and management.

The role requires 5–8 years in IT/security, hands-on Tenable/Nessus experience, and strong communication to coordinate across Infrastructure, Network and Apps teams.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field

Responsibilities

• Manage the end-to-end Vulnerability Management lifecycle (scan, assess, prioritise, remediate, report)
• Configure and maintain vulnerability scanning tools (e.g. Tenable Security Center / Nessus)
• Ensure scheduled scans are executed, investigate failures, and re-run where required
• Perform asset discovery and onboarding into vulnerability management tools
• Conduct risk-based vulnerability assessments and prioritise remediation actions
• Work with Infrastructure, Network, and Application teams to drive remediation
• Manage false positives and risk acceptance, including stakeholder coordination
• Maintain dashboards and reporting for technical teams and management
• Support penetration testing remediation tracking
• Monitor threats and conduct ad-hoc exposure assessments
• Drive process improvements and ensure compliance with internal security policies
• Prepare regular security reports (weekly / monthly / ad-hoc)

Job description

Vulnerability Management Engineer (Cyber Security / Tenable)

Job Openings Vulnerability Management Engineer (Cyber Security / Tenable)

About the job Vulnerability Management Engineer (Cyber Security / Tenable)

Responsibilities:

• Manage the end-to-end Vulnerability Management lifecycle (scan, assess, prioritise, remediate, report)
• Configure and maintain vulnerability scanning tools (e.g. **Tenable Security Center / Nessus)
• Ensure scheduled scans are executed, investigate failures, and re-run where required
• Perform asset discovery and onboarding into vulnerability management tools
• Conduct risk-based vulnerability assessments and prioritise remediation actions
• Work closely with Infrastructure, Network, and Application teams to drive remediation
• Manage false positives and risk acceptance, including stakeholder coordination
• Maintain dashboards and reporting for technical teams and management
• Support penetration testing remediation tracking
• Monitor emerging threats and conduct ad-hoc exposure assessments
• Drive process improvements and ensure compliance with internal security policies
• Prepare regular security reports (weekly / monthly / ad-hoc)

Requirements:

• Bachelor's Degree in Computer Science, IT, or related field
• 5 to 8 years of IT experience, including at least 3 to 5 years in IT Security / Vulnerability Management
• Hands-on experience with Tenable Security Center or similar tools (e.g. Nessus, Qualys)
• Strong understanding of Operating Systems (Windows, Linux), Networks and basic application security concepts
• Experience working in operations / production environments
• Ability to perform risk assessment and prioritisation
• Familiar with ITIL processes
• Good reporting and documentation skills (Excel, PowerPoint; Power BI is a plus)
• Strong communication and stakeholder management skills
• Able to work independently in a fast-paced, shift-based environment

Good to Have:

• Certifications such asCertified Information Systems Security Professional (CISSP),GIAC Enterprise Vulnerability Assessor (GEVA)
• Exposure to financial services / banking environment
• Basic scripting knowledge (PowerShell, Bash)
• Experience with dashboards (e.g. Power BI)

Additional info:

• This role is offered on a yearly renewable contract basis.
• Able to support rotational shift scheduled based on duty roaster (Europe and/or Asia time zone).
• Able to provide on-call support during non-business hours/and or on weekends.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239