Vulnerability Management Engineer: Tenable/Rapid7 Expert

SmartRecruiters, Inc.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

NCS is seeking an experienced Vulnerability Management System Engineer to design and implement enterprise-grade solutions using Tenable and Rapid7 across cloud, hybrid, and on-prem environments. You will lead architecting, deploying, and integrating security tooling with CI/CD and SIEM while ensuring compliance and robust automation.

This Day 1 position requires deep expertise in vulnerability assessment, scripting for automation, and strong collaboration with cross-functional teams.

Qualifications

• 5+ years with enterprise vulnerability management implementations.
• Deep expertise with Tenable platforms (Tenable.io, Tenable.sc, Nessus).
• Experience with Rapid7 (InsightVM/Nexpose) or equivalents.
• Cloud platforms (AWS, Azure, GCP) and cloud-native security tools.
• Scripting in Python, PowerShell, Bash for automation.
• Knowledge of CVE/CVSS, threat intelligence, and security controls.

Responsibilities

• Design vulnerability management architectures aligned to client needs.
• Develop blueprints for enterprise-scale deployments (cloud, hybrid, on-prem).
• Create integration strategies with SIEM and existing infrastructure.
• Lead deployment of Tenable and Rapid7 platforms across environments.
• Configure scanners, CSPM/CWP, and container security (KSPM).
• Integrate with CI/CD pipelines and IaC scanning.
• Produce runbooks, docs, and handover materials.

Skills

Vulnerability management

Tenable platform expertise

Rapid7 expertise

Cloud security

Python

PowerShell

Bash

CI/CD integration

Communication skills

Agile methodologies

Tools

Nessus

Tenable.io

Tenable.sc

InsightVM

Nexpose

CSPM

KSPM

Job description

NCS is seeking an experienced Vulnerability Management System Engineer to design and implement enterprise-grade solutions using Tenable and Rapid7 across cloud, hybrid, and on-prem environments. You will lead architecting, deploying, and integrating security tooling with CI/CD and SIEM while ensuring compliance and robust automation.

This Day 1 position requires deep expertise in vulnerability assessment, scripting for automation, and strong collaboration with cross-functional teams.