Workstreet

2 weeks ago

Vulnerability Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Join the Vulnerability Management team to close the loop from scanning to remediation for a portfolio of fast-growth startups. You’ll configure and maintain scanning infrastructure across client networks and cloud environments, analyze results using CVSS/EPSS risk prioritization, and translate findings into actionable guidance. Work directly with IT and DevOps to deploy patches in AWS, Azure, and GCP while supporting audit evidence for frameworks like SOC 2 and ISO 27001.

Location: Philippines

Workplace: Remote

Employment Type: Full time

Job Function: Data Analytics & Business Intelligence

Key Responsibilities

•Configure, schedule, and maintain authenticated vulnerability scanning across client networks and cloud-native environments using enterprise platforms.
•Execute threat analysis and risk prioritization by evaluating scan outputs, filtering false positives, and applying CVSS/EPSS-based models with threat intelligence and asset context.
•Partner directly with client IT, DevOps, and software engineers to drive remediation workflows and accelerate time-to-remediate.
•Document, verify, and track vulnerability exceptions and long-term risk acceptances, and map patching data to control evidence for regulatory audits.
•Serve as the primary security advisor for a client portfolio by delivering milestones, handling escalations, and producing status reports and executive summaries.

Travel: Low travel

Key Requirements

•Hands-on configuration and operational experience with one or more vulnerability management scanning platforms (Tenable/Nessus, Qualys, Rapid7 InsightVM, or Vanta).
•Deep understanding of vulnerability scoring systems (CVSS and EPSS) and data-driven risk-based prioritization.
•Ability to interpret raw scan outputs, filter false positives, and translate technical findings into business-relevant risk language.
•Foundational familiarity with common vulnerability classes across cloud, OS, application, and network layers, including exploit vectors.
•Working knowledge of security compliance frameworks (SOC 2, ISO 27001, HIPAA, or CMMC) and how scanning maps to audit evidence.

Experience:Managed security servicesConsultingGRCSecurity compliance

Skills:Client-centricRisk-based decision-makingWritten communicationCollaborationOwnership and follow-through

Certifications:CompTIA Security+CEHTenable Certified Security AssociateGIAC GEVA

Languages:English

Tech Stack:VantaTenableNessusQualysRapid7 InsightVMCVSSEPSSAWSAzureGCPSOC 2ISO 27001GDPRCMMCNIST 800-171NIST 800-53FedRAMPHIPAATenable/NessusCVE lifecycle

Company Brief

Workstreet

Operates an online recruitment platform connecting employers with job seekers, offering job listings, candidate sourcing tools, and employer branding solutions to streamline hiring and talent acquisition processes for small to medium-sized businesses.

Industry: HR Tech

Website

Loading job details...

Preparing the role view and application actions.

Workstreet

2 weeks ago

Vulnerability Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Location: Philippines

Workplace: Remote

Employment Type: Full time

Job Function: Data Analytics & Business Intelligence

Key Responsibilities

•Configure, schedule, and maintain authenticated vulnerability scanning across client networks and cloud-native environments using enterprise platforms.
•Execute threat analysis and risk prioritization by evaluating scan outputs, filtering false positives, and applying CVSS/EPSS-based models with threat intelligence and asset context.
•Partner directly with client IT, DevOps, and software engineers to drive remediation workflows and accelerate time-to-remediate.
•Document, verify, and track vulnerability exceptions and long-term risk acceptances, and map patching data to control evidence for regulatory audits.
•Serve as the primary security advisor for a client portfolio by delivering milestones, handling escalations, and producing status reports and executive summaries.

Travel: Low travel

Key Requirements

•Hands-on configuration and operational experience with one or more vulnerability management scanning platforms (Tenable/Nessus, Qualys, Rapid7 InsightVM, or Vanta).
•Deep understanding of vulnerability scoring systems (CVSS and EPSS) and data-driven risk-based prioritization.
•Ability to interpret raw scan outputs, filter false positives, and translate technical findings into business-relevant risk language.
•Foundational familiarity with common vulnerability classes across cloud, OS, application, and network layers, including exploit vectors.
•Working knowledge of security compliance frameworks (SOC 2, ISO 27001, HIPAA, or CMMC) and how scanning maps to audit evidence.

Experience:Managed security servicesConsultingGRCSecurity compliance

Skills:Client-centricRisk-based decision-makingWritten communicationCollaborationOwnership and follow-through

Certifications:CompTIA Security+CEHTenable Certified Security AssociateGIAC GEVA

Languages:English

Tech Stack:VantaTenableNessusQualysRapid7 InsightVMCVSSEPSSAWSAzureGCPSOC 2ISO 27001GDPRCMMCNIST 800-171NIST 800-53FedRAMPHIPAATenable/NessusCVE lifecycle

Company Brief

Workstreet

Industry: HR Tech

Website