ICT security engineer
Summary
Designs and runs the company’s vulnerability management program, scanning assets with Tenable/Nessus, automating reports in Python, and coordinating fixes with IT teams to reduce security risks.
Responsibilities
- Design, implement, and manage the enterprise Vulnerability Management (VM) program across the full vulnerability lifecycle.
- Configure, schedule, monitor, and optimize vulnerability scans using Tenable/Nessus or equivalent tools.
- Automate VM processes, reporting, and workflows using Python or similar scripting languages to improve operational efficiency.
- Perform continuous asset discovery and ensure accurate onboarding into the vulnerability management platform and CMDB.
- Assess, prioritize, and track vulnerabilities using a risk-based approach aligned with business impact.
- Collaborate with infrastructure, network, database, and application teams to drive timely remediation.
- Validate scan results, investigate false positives, and support risk acceptance and penetration testing remediation.
- Develop dashboards, reports, and KPIs using Power BI, Excel, or similar reporting tools.
- Support global stakeholders, continuous process improvement, and compliance with organizational security policies and regulatory requirements.
- Stay current with emerging threats and recommend improvements to strengthen the organization's security posture.
Qualifications
- 8–10 years of IT experience, including 4+ years of hands-on enterprise Vulnerability Management experience.
- Strong experience managing end-to-end vulnerability management using Tenable SecurityCenter/Nessus or equivalent platforms.
- Experience with vulnerability assessment and remediation across Windows, Linux/Unix, networks, databases, and enterprise applications.
- Hands-on experience with Python or similar scripting languages to automate vulnerability management tasks, reporting, and integrations.
- Strong understanding of risk-based vulnerability prioritization, threat intelligence, and remediation practices.
- Experience creating dashboards and executive reports using Power BI, Excel, and related reporting tools.
- Strong analytical, communication, and stakeholder management skills with the ability to work effectively across global teams.
Interested applicants please send your resume in MS Words format to prasant.sirohi@ambition.com.sg and attention to Prasant Sirohi (R22106307)
Shortlisted candidates will be notified
www.ambition.com.sg
EA Registration Number: R22106307
Data provided is for recruitment purposes only
Business Registration Number: 200611680D. License Number: 10C5117