Vulnerability Management Engineer (Hybrid)
Core
Own the end-to-end vulnerability management lifecycle, from discovery and analysis through remediation and verification, to strengthen the security posture of the KNA organisation.
Role type
Senior IC vulnerability management engineer
Builds
Enterprise vulnerability management programs and incident response capabilities
Domain
Cybersecurity / Information Security
Required skills
Vulnerability management tools (Tenable, Qualys, Rapid7, CrowdStrike Falcon Spotlight), Vulnerability remediation analysis, Incident response, Cloud security (AWS, Azure, GCP), Container and Kubernetes security, Scripting (Python, PowerShell, Bash), Security frameworks (NIST, ISO 27001, PCI DSS, CIS Benchmarks)
Preferred skills
GCIH, GCFA, CISSP, CEH, Security+ certifications
Technologies
Tenable, Qualys, Rapid7, CrowdStrike Falcon Spotlight, ServiceNow, Jira, SIEM, EDR, Python, PowerShell, Bash, AWS, Azure, GCP, Kubernetes
Responsibilities
Administer and optimise enterprise vulnerability management platforms across on-premises, cloud, container, and endpoint environments; Perform in-depth vulnerability remediation analysis by validating findings and prioritising risk; Partner with infrastructure and cloud owners to define remediation plans and track progress; Respond to security incidents and actively exploited vulnerabilities by triaging alerts and supporting investigation; Develop and maintain dashboards, metrics, and executive reporting; Automate vulnerability management workflows using scripting and APIs; Manage the vulnerability exception and risk acceptance process; Support audits and compliance activities for ISO 27001, PCI DSS, SOX, SOC 2.
Seniority
Senior, hands-on IC
