Vulnerability Management Engineer

Objectives

We are seeking a Vulnerability Management Engineer with around 2 years of experience to support vulnerability management activities, help assess security findings in development pipelines, and work with development teams to track and remediate vulnerabilities.

Roles & Responsibilities

• Support vulnerability management activities across software development and delivery workflows.
• Assist in monitoring and managing security findings within CI/CD pipelines, including GitLab CI/CD.
• Help identify, assess, and prioritize vulnerabilities with reference to common security frameworks and OWASP guidance.
• Support dependency and library management in Linux environments and Maven-based projects.
• Review security reports, document findings, and maintain structured tracking using Excel or similar tools.
• Collaborate with development teams to follow up on remediation actions and track findings through closure.
• Participate in Scrum ceremonies and agile team activities.
• Contribute to improving secure software practices and vulnerability tracking processes.

Tech Skills

• Basic understanding of software security, vulnerability concepts, and secure software development practices.
• Around 2 years of relevant experience in vulnerability management, application security, software development support, or a related area.
• Familiarity with OWASP principles and common vulnerability frameworks.
• Initial hands-on exposure to GitLab CI/CD or similar CI/CD tools.
• Basic knowledge of Linux systems and server environments.
• Understanding of dependency and library management, for example Maven.
• Comfortable using Excel or similar tools for tracking and reporting; good analytical skills and attention to detail.
• Exposure to vulnerability scanning tools such as SAST, DAST, or dependency scanning is an advantage.
• Basic Bash or Python scripting, DevSecOps concepts, and awareness of CVE tracking/security advisories are advantages.

Education and experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related discipline.
• Around 2 years of relevant work experience in vulnerability management, application security, or a related technical role.
• Willingness to learn new technologies and participate in knowledge-sharing within the company.

Expected attributes

• Good analytical skills, attention to detail, and a structured approach to investigating and tracking security findings.
• Good communication skills and ability to collaborate with development and security teams.
• Team player who can also work independently on assigned tasks with guidance.
• Positive attitude and interest in growing within cybersecurity, vulnerability management, and secure software practices.
• Quality-conscious and systematic work attitude, with the ability to work in a cross-cultural, multi-national environment.