Vulnerability Management Engineer

Role Purpose : Manage the end-to-end vulnerability lifecycle and reduce the Group's exposure to known and emerging technical vulnerabilities.

Key Responsibilities:

• Operate and optimize vulnerability scanning and assessment platforms.
• Identify, validate, prioritize and track vulnerabilities across the environment.
• Apply risk-based prioritization using severity, asset criticality and threat intelligence.
• Coordinate remediation with application, infrastructure, cloud and technology teams.
• Define vulnerability remediation SLAs and escalation processes.
• Conduct periodic vulnerability assessments and verification scans.
• Produce vulnerability metrics, trends and management reports.
• Support threat-led vulnerability prioritization and continuous exposure management.

Requirements

• Relevant degree or equivalent professional qualification in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.
• Relevant professional certifications will be an advantage and should align with the specific role.
• Demonstrable practical experience relevant to the position.
• Strong communication, analytical, documentation and stakeholder-management skills.
• Ability to operate in a regulated, technology-driven and multi-business environment.

Preferred / Added Advantage Certifications

• CompTIA CySA+
• Security+ or equivalent
• Rapid7, Qualys, Tenable or equivalent vulnerability management platform training/certification
• OSCP or equivalent (advantage

Benefits

Industry Standard