Threat & Vulnerability Management Lead - J13326
Summary
Owns the full vulnerability management lifecycle at a large enterprise — designing scanning programs, building risk-based prioritization beyond flat CVSS scores, and driving remediation with IT, DevOps and vendors across on-prem, cloud and containerized environments. Requires 7+ years in IT security.
Salary: $50,000 – $65,000 per month
About the Client: We are partnering with a large-scale enterprise running a highly complex infrastructure footprint spanning on-premises data centers, modern cloud setups, and containerized environments. They are investing heavily in proactive threat management and need a dedicated specialist to mature their internal security posture.
The Role & Landscape: You will take complete ownership of the vulnerability management lifecycle. This isn't just about running scans and handing off reports; it’s about context and remediation.
Design and run comprehensive scanning programs (credentialed/non-credentialed, agent-based, external/internal).
Build a prioritization framework that looks at actual threat exposure—factoring in asset criticality, exploit availability, and data sensitivity rather than just leaning on a flat CVSS score.
Work closely with IT infrastructure, DevOps, and technical vendors to drive actual remediation and integrate security tools.
Maintain and tune system operating procedures, including patch management, disaster recovery, and system monitoring.
What We Are Looking For:
7+ years in IT security, specifically owning vulnerability and threat exposure management.
Deep, practical knowledge of CVEs, CVSS scoring, and exploit databases.
Hands-on background with patch management tools and ITSM platforms for ticketing and workflow automation.
Strong technical understanding of operating systems, databases, network infra, and specifically containerized/cloud environments.
Ideally, you have scripting capability to automate workflows and hold certs like CISSP, CISM, or CISA.
Knowledge of frameworks like ISO 27001, NIST, and PRC Cybersecurity Law is a major plus.
Why Apply To This Role: This is an opportunity to build and dictate a vulnerability framework your way. You will have high visibility across different tech teams, working on modern infrastructure (cloud/containers) while having the autonomy to push security best practices forward without heavy red tape.
If this outstanding opportunity sounds like your next career move, please submit through "Apply Now" or send your resume in Word format to Danny Kwan at resume(at)pinpointasia(dot)com and put Threat & Vulnerability Management Lead - J13326 in the subject header.