Vulnerability Risk Engineer — Cyber Defense & Remediation

OCBC Bank; Singapore; On-site; SGD 90,000 - 140,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Job summary

OCBC Bank Singapore is seeking a Cyber Engineering - Risk professional to safeguard systems and data from cyber threats. You’ll collaborate with engineering teams to identify vulnerabilities, implement scanning schedules, and drive risk-based remediation with clear KPI dashboards.

The role requires 3–5 years' vulnerability management experience, familiarity with VA tools (Tenable, Qualys, Rapid7), and knowledge of CVSS and OWASP Top 10. A professional certification is preferred.

Qualifications

• 3–5 years hands-on vulnerability management experience.
• Strong understanding of vulnerability scoring (CVSS) and remediation strategies.
• Familiarity with OWASP Top 10 and regulatory audit readiness.
• Excellent communication to translate technical findings for stakeholders.
• Proficiency in Microsoft Office and scripting basics (Python, Bash).
• Experience with VA tools such as Tenable, Qualys, Rapid7.

Responsibilities

• Execute a comprehensive vulnerability management strategy.
• Develop and implement automated scanning schedules and risk-based prioritization.
• Analyze scan results, validate vulnerabilities, and produce actionable reports for technical and executive audiences.
• Collaborate with IT and application teams to track remediation and close high-risk findings.
• Develop dashboards and KPIs to monitor vulnerability trends and compliance posture.
• Contribute to vulnerability management process improvements and tooling.

Skills

Vulnerability management

CVSS understanding

OWASP Top 10

Regulatory compliance

Python scripting

Bash scripting

MS Office

Education

Bachelor's/Diploma in CS/Cybersecurity

Tools

Tenable

Qualys

Rapid7

Job description

OCBC Bank Singapore is seeking a Cyber Engineering - Risk professional to safeguard systems and data from cyber threats. You’ll collaborate with engineering teams to identify vulnerabilities, implement scanning schedules, and drive risk-based remediation with clear KPI dashboards.

The role requires 3–5 years' vulnerability management experience, familiarity with VA tools (Tenable, Qualys, Rapid7), and knowledge of CVSS and OWASP Top 10. A professional certification is preferred.