Vulnerability Management Engineer

Role Purpose: Manage the end-to-end vulnerability lifecycle and reduce the Group's exposure to known and emerging technical vulnerabilities.

Key Responsibilities:

• Operate and optimize vulnerability scanning and assessment platforms.
  
• Identify, validate, prioritize and track vulnerabilities across the environment.
  
• Apply risk-based prioritization using severity, asset criticality and threat intelligence.
  
• Coordinate remediation with application, infrastructure, cloud and technology teams.
  
• Define vulnerability remediation SLAs and escalation processes.
  
• Conduct periodic vulnerability assessments and verification scans.
  
• Produce vulnerability metrics, trends and management reports.
  
• Support threat-led vulnerability prioritization and continuous exposure management.

Requirements

• Relevant degree or equivalent professional qualification in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.
  
• Relevant professional certifications will be an advantage and should align with the specific role.
  
• Demonstrable practical experience relevant to the position.
  
• Strong communication, analytical, documentation and stakeholder-management skills.
  
• Ability to operate in a regulated, technology-driven and multi-business environment.

Preferred / Added Advantage Certifications

• CompTIA CySA+
  
• Security+ or equivalent
  
• Rapid7, Qualys, Tenable or equivalent vulnerability management platform training/certification
  
• OSCP or equivalent (advantage

Benefits

Industry Standard