Threat and Vulnerability Management Lead

5 days ago


Manila, National Capital Region, Philippines SM Investments Full time
Threat and Vulnerability Management Lead

1 day ago Be among the first 25 applicants

Vulnerability Assessments (VA) and Policy Compliance (PC): Infrastructure AND Applications

  • Perform daily application onboarding and assessment for vulnerability scanning.
  • Analyze vulnerability scan results and generate comprehensive reports.
  • Collaborate with relevant teams to ensure timely remediation of identified vulnerabilities.
  • Track and document the progress of remediation efforts.
  • Provide daily support for troubleshooting and coordination activities related to security incidents.
  • Generate reports and perform clean-up tasks to maintain accurate and up-to-date security records.
  • Conduct policy compliance scanning and reporting, ensuring adherence to security standards.
  • Assist in tracking and documenting remediation efforts for identified security risks.
  • Respond to risk assessment requests related to architecture design and new applications.
  • Evaluate security risks associated with exemption requests for WAF rules, Snyk findings, IP/URL whitelisting, and ad-hoc assessments.
  • Collaborate with stakeholders to gather necessary information and perform in-depth risk analysis.
  • Prepare detailed reports outlining risks and recommendations for risk mitigation.

Feasibility Studies

  • Conduct daily feasibility studies to assess the viability and effectiveness of potential security measures or initiatives.
  • Collaborate with cross-functional teams to gather information and analyze the feasibility of implementing new security solutions.
  • Prepare reports summarizing the findings and recommendations from feasibility studies.

Automation Initiatives

  • Identify opportunities for process automation within the security operations function.
  • Develop and implement automated solutions to streamline security operations and enhance efficiency.
  • Continuously monitor and optimize existing automation initiatives.

Threat Monitoring

  • Monitor daily threat bulletins, threat intelligence feeds, and other relevant sources.
  • Stay updated on emerging threats, vulnerabilities, and industry trends.
  • Assist in identifying potential security risks and implementing proactive measures to mitigate them.

Periodic Tasks

  • Conduct periodic activities such as policy configuration and onboarding.
  • Perform firewall (FW) rule reviews, coordinate remediation efforts, and track progress.
  • Coordinate and conduct password audits, ensuring compliance with password policies.
  • Collaborate with teams to address identified vulnerabilities and improve security posture.

Qualifications and Requirements:

  • Bachelor's degree in Computer Science, Information Security, or a related field.
  • Solid understanding of information security principles, concepts, and best practices.
  • Experience in conducting feasibility studies and performing risk assessments.
  • Knowledge and experience on working on various Cloud environment and tools
  • Knowledge of vulnerability assessment tools and techniques.
  • Knowledge and understanding of OWASP top 10, NIST, CIS and other Security frameworks
  • Familiarity with threat monitoring tools and practices.
  • Strong analytical and problem-solving skills.
  • Excellent written and verbal communication skills.
  • Ability to work both independently and collaboratively within a team.
  • Attention to detail and ability to prioritize tasks effectively.
  • Strong Application Development skills and experience are a plus (any languages used for automation)
  • Relevant certifications (e.g., CISSP, CISM, CEH) are a plus.

Join our team and contribute to the security of our organization by effectively managing security operations, conducting thorough assessments, and implementing proactive security measures. This is an exciting opportunity for someone passionate about information security and dedicated to maintaining a robust security posture. Apply now and help us safeguard our digital assets.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

#J-18808-Ljbffr

  • Manila, National Capital Region, Philippines SM Investments Corporation Full time

    Position Overview: We are seeking a highly motivated and detail-oriented Cyber Security Threat Technical Manager to join our team. As a Cyber Threat Technical Lead, you will be responsible for conducting various security activities, including feasibility studies, automation initiatives, vulnerability assessments (VA), threat monitoring, risk assessments,...


  • Manila, National Capital Region, Philippines N-able Technologies Ltd. Full time

    About the RoleN-able Technologies Ltd. is looking for an experienced Vulnerability Threat Analyst to join our Security Engineering team. As a high-performing Vulnerability Analyst, you will be responsible for analyzing data from various cyber defense tools, prioritizing threats based on underlying vulnerabilities and potential impact.Key...


  • Manila, National Capital Region, Philippines SolarWinds Full time

    SolarWinds is committed to creating a culture that values innovation, collaboration, and growth. As a Security Engineer, you will have the opportunity to work with a talented team to develop and implement security best practices and drive remediation activities in our cloud environments.Your Responsibilities:Conduct on-prem and cloud assessments of threats...


  • Manila, National Capital Region, Philippines Michael Page Full time

    Job SummaryMicahel Page is seeking a senior cybersecurity consultant to lead our threat detection and response team.About the Role:We are looking for an experienced professional with expertise in threat detection, response, and mitigation.The ideal candidate will have a strong background in cybersecurity, with a focus on threat exposure management,...


  • Manila, National Capital Region, Philippines Nityo Infotech Services Philippines Inc. Full time

    Job OverviewNityo Infotech Services Philippines Inc. seeks a highly skilled Cybersecurity Threat Intelligence Lead to join our team. The ideal candidate will have extensive experience in threat intelligence, incident response, and vulnerability management.About the RoleThe Assistant Manager, Threat Intelligence, plays a crucial role in identifying,...


  • Manila, National Capital Region, Philippines Viking Cloud, Inc Full time

    Job DescriptionVikingCloud, Inc is seeking a highly skilled Qualified Security Assessor to join our team. As a Qualified Security Assessor, you will be responsible for conducting thorough reviews of client systems and networks to identify vulnerabilities and compliance gaps.Key ResponsibilitiesConduct comprehensive reviews of client systems and...


  • Manila, National Capital Region, Philippines Insight Full time

    Job SummaryWe are seeking a highly skilled Network Vulnerability Analyst to join our team at Insight. This individual will be responsible for identifying and mitigating potential security threats to our organization's network.The successful candidate will create and maintain a set of security standards and best practices for the organization. They will also...


  • Manila, National Capital Region, Philippines Nityo Infotech Services Philippines Inc. Full time

    Job RequirementsThe ideal candidate for this role will have:3-5 years of experience in cybersecurity, with a focus on threat intelligence, incident response, and vulnerability management.Hands-on experience with threat intelligence platforms, EASM, SPM, SIEM, and vulnerability assessment tools.Working knowledge of frameworks, best practices, and...


  • Manila, National Capital Region, Philippines Nityo Infotech Services Philippines Inc. Full time

    About Nityo Infotech Services Philippines Inc.We are a leading IT services company that provides cutting-edge solutions to our clients. Our team is comprised of experienced professionals who are passionate about delivering exceptional results.Job DescriptionThe Assistant Manager, Threat Intelligence, will oversee the identification, analysis, and...


  • Manila, National Capital Region, Philippines Vista Equity Partners Management, LLC Full time

    Welcome to Vista Equity Partners Management, LLC, where we empower businesses to succeed through strategic investments and operational expertise. We are looking for a seasoned cyber security professional to join our Cloud Operations team as a Senior Cyber Security Analyst.About You:You will take a leading role in the ongoing assessment and protection of our...


  • Manila, National Capital Region, Philippines YONDU INC. Full time

    The Tech Security Engineer – VAPT is responsible for assessing and strengthening the organization's securityposture by conducting vulnerability assessments and penetration testing (VAPT) across infrastructure, networks,and applications (Web, Mobile, Client-Server). This role involves identifying, analyzing, and mitigating securityvulnerabilities, ensuring...


  • Manila, National Capital Region, Philippines N-able Technologies Ltd. Full time

    Why N-ableIT doesn't get better than this N-able isn't just another software company – we're going places, and we'd love for you to be a part of that journey. With N-ablites in more than 15 countries around the world, you're adding your unique voice to a diverse team of people who are supporting our customers, and one another. The Way We Work, our hybrid...


  • Manila, National Capital Region, Philippines Vista Equity Partners Management, LLC Full time

    At Vista Equity Partners Management, LLC, we strive to create a secure and trustworthy environment for our customers and partners. As a Senior Cyber Security Analyst on our Cloud Operations team, you will play a critical role in protecting and defending against cyber threats and vulnerabilities.About You:You will take a leading role in the ongoing assessment...


  • Manila, National Capital Region, Philippines HCM Nexus Full time

    Essential Skills and ExperienceWe are seeking a highly skilled Advanced Threat Specialist to join our team at HCM Nexus. As a key member of our offensive security team, you will be responsible for analyzing and reporting on advanced threats.You will lead penetration testing projects, identifying, assessing, and documenting critical security...


  • Manila, National Capital Region, Philippines TREND MICRO INCORPORATED-PHILIPPINE BRANCH Full time

    VicOne is seeking an expert Automotive Threat Researcher to join our cybersecurity team. Ideal candidates will enhance vehicle security through innovative research and analysis. Apply now to be part of our dynamic companyResponsibilities:Conduct vulnerability research on QNX, AGL, Android Automotive, or related automotive operating systems.Perform automotive...


  • Manila, National Capital Region, Philippines Total Information Management Corp. Full time

    Job DescriptionThe SOC Analyst is responsible for a broad range of responsibilities with a primary emphasis on 24/7 log analysis, threat and event monitoring, and data loss prevention to contribute to effective remediation of security incidents.This includes being part of the primary service relationship interface between customers and TIM SOC Operations,...


  • Manila, National Capital Region, Philippines METROGLOBAL SERVICES, INC. Full time

    Key Responsibilities:As a Threat Modeling and Risk Management Expert at MetroGlobal Services, Inc., you will be responsible for identifying and assessing potential security threats to our organization's systems and data. This includes conducting thorough threat modeling exercises to identify potential vulnerabilities and providing recommendations for...

  • Cyber Threat Defender

    7 hours ago


    Manila, National Capital Region, Philippines Hirebridge Full time

    About Tribute TechnologyTribute Technology is a pioneering force in the field of end-of-life celebrations, providing innovative technology solutions that make a meaningful impact on people's lives.We are seeking a seasoned cybersecurity professional to join our Cloud Operations team as a Senior Cyber Security Analyst. As a key member of our team, you will...


  • Manila, National Capital Region, Philippines Michael Page Full time

    Job DescriptionMicahel Page is seeking a highly skilled information security professional to join our team in the role of Threat Exposure Management Expert.About the Role:We are looking for an experienced professional with expertise in threat exposure management, vulnerability assessment, and attack surface protection.The ideal candidate will have a strong...


  • Manila, National Capital Region, Philippines SM Investments Full time

    SM Investments is seeking a highly motivated Threat Intelligence Specialist to monitor daily threat bulletins, threat intelligence feeds, and other relevant sources. The ideal candidate will stay updated on emerging threats, vulnerabilities, and industry trends.Key Responsibilities:Assist in identifying potential security risks and implementing proactive...