Responsibilities:
- Lead vulnerability management activities, including identification, assessment, prioritization, and remediation tracking of security vulnerabilities across systems, applications, and infrastructure.
- Perform regular vulnerability scans using industry-standard tools (e.g., Tenable, Qualys, Rapid7) and ensure findings are analyzed and addressed in a timely manner.
- Collaborate with IT, DevOps, and application teams to remediate vulnerabilities and implement security best practices.
- Develop and maintain vulnerability management policies, procedures, and reporting processes.
- Provide technical expertise in patch management, configuration management, and secure baseline enforcement.
- Research and stay updated on the latest vulnerabilities, exploits, and security advisories, and communicate relevant risks to stakeholders.
- Conduct root cause analysis for recurring or high-risk vulnerabilities and recommend long-term mitigation strategies.
- Prepare and deliver metrics, dashboards, and executive-level reports on vulnerability posture and remediation progress.
- Support compliance efforts by aligning vulnerability management with frameworks such as NIST, ISO 27001, and regulatory requirements.
Requirements:
- 2+ years of experience in cybersecurity, with a focus on vulnerability management, patch management, or system hardening.
- Hands-on experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7) and knowledge of remediation workflows.
- Strong understanding of common vulnerabilities (CVEs, CVSS scoring), threat landscape, and risk prioritization.
- Familiarity with operating systems (Windows, Linux), cloud platforms, and networking fundamentals.
- Knowledge of security frameworks and standards (NIST, CIS Benchmarks, ISO 27001).
- Excellent problem-solving, analytical, and communication skills.
- Ability to work cross-functionally with technical and non-technical teams.
- Relevant certifications (e.g., CompTIA Security+, CEH, CISSP, GIAC GSEC, or Tenable/Qualys certifications) are a plus.
Education:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Our Addresses and Working Hours:
Seatrium Limited
(Pioneer Yard)
50 Gul Road, Singapore 629353
(Islandwide transport provided)
Mon - Fri: 7:30am - 5:30pm
Interested candidates are invited to send us an updated resume with your current and expected salary and earliest availability.
We regret that only shortlisted candidates will be notified.
Please note that your personal data disclosed to Seatrium Limited and our group of companies, shall be used for the purposes of evaluation, and processing in accordance with our recruitment processes and policies. By providing your personal data, you have consented to the aforesaid purpose under the provisions of the Personal Data Protection Act 2012.
