Vulnerability Management Analyst

Vulnerability Management Analyst | 12-Month Contract | Remote, Singapore

You'll be one of five analysts forming the APAC shift of a new follow-the-sun vulnerability triage service, running 24 hours a day, five days a week across APAC, North America and EMEA. When a new vulnerability is disclosed, you decide whether it matters to the customer, how much, and why. LT Harper is running this search on behalf of a global technology consulting firm and its enterprise customer.

The essentials

• Minimum 12-month contract
• 100% remote, based in Singapore, covering the APAC shift
• Day rate: on application
• One of 15 analysts across three regions, five per time zone

What you'll actually do

• Triage newly disclosed vulnerabilities and work out their relevance and impact to the customer's applications and assets
• Assess exploitability using threat intelligence, exploit and proof of concept (PoC) details, and likely attack paths
• Assign severity and risk ratings mapped to CVE, CPE and CVSS, with a clear rationale behind every rating
• Keep audit-ready case notes that hand over cleanly to colleagues in other time zones
• Support business-as-usual triage alongside urgent escalations when something critical lands

What you'll need

• Hands-on vulnerability triage and risk assessment across the end-to-end vulnerability management workflow, with fluency in CVE, CPE and CVSS
• The ability to read disclosures, advisories and exploit information and judge the real-world risk
• Clear technical writing, so impact, actions and priorities are easy to act on
• Broad familiarity with enterprise platforms such as Microsoft, VMware, Oracle/Java, Citrix and F5, and how their patch and release cycles work
• Comfort working across cloud environments and large-scale open-source use in enterprise estates
• Strong prioritisation and an operations mindset, able to balance several cases at once

What's in it for you

• A minimum 12-month engagement helping build a new global service
• Fully remote working
• Daily collaboration with counterparts in North America and EMEA

If you meet most but not all of the essentials, we'd still like to hear from you.

If you're interested, apply directly on this advert. If you have any questions, or would like to refer someone, reach out to Jack Lamport at [Confidential Information].