About this role
Primary Purpose
We are seeking an experienced Vulnerability Management System Engineer to join our Cyber team. This is a specialist Day 1 role focused exclusively on the design, architecture, and implementation of enterprise-grade vulnerability management solutions. You will work with cutting-edge platforms such as Tenable and Rapid7 to deliver robust security solutions for our clients
Job Description
Solution Design & Architecture
Design comprehensive vulnerability management architectures aligned with client requirements and industry best practicesDevelop technical solution blueprints for enterprise-scale deployments across cloud, hybrid, and on-premises environmentsCreate integration strategies with existing security infrastructure and SIEM platformsDefine scanning strategies, policies, and compliance frameworks (CIS, NIST, PCI-DSS, HIPAA, ISO 27001)Implementation & Deployment
Lead end-to-end implementation of Tenable (Nessus, Tenable.io, Tenable.sc), Rapid7 (InsightVM, Nexpose) platforms or equivalentConfigure vulnerability scanners, agents, and sensors across diverse infrastructure environmentsImplement Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) capabilitiesDeploy container security and Kubernetes Security Posture Management (KSPM) solutionsConfigure automated scanning schedules, credential management, and network segmentation strategiesIntegration & Configuration
Integrate vulnerability management platforms with CI/CD pipelines for DevSecOps workflowsImplement Infrastructure as Code (IaC) scanning capabilitiesConfigure API integrations with ticketing systems, SIEM, and security orchestration platformsDevelop automation scripts for reporting, remediation workflows, and compliance trackingTechnical Documentation & Knowledge Transfer
Produce comprehensive technical documentation including architecture diagrams, configuration guides, and runbooksDevelop standard operating procedures and best practice guidelinesConduct knowledge transfer sessions and training for client teamsCreate handover documentation for Day 2 operations teams Technical Expertise
Due to project sensitivity, we can only consider Singapore Citizen5+ years of hands-on experience implementing enterprise vulnerability management solutionsDeep expertise with Tenable platforms (Tenable.io, Tenable.sc, Nessus Professional, Rapid7 solutions (InsightVM, Nexpose) or equivalent.Strong understanding of vulnerability assessment methodologies, CVE/CVSS frameworks, and threat intelligenceExperience with cloud platforms (AWS, Azure, GCP) and cloud-native security toolsProficiency in scripting languages (Python, PowerShell, Bash) for automationKnowledge of network protocols, security architectures, and enterprise infrastructureSecurity & Compliance Knowledge
Understanding of security frameworks and compliance standards (CIS Benchmarks, NIST CSF, PCI-DSS, HIPAA, ISO 27001)Familiarity with MITRE ATT&CK framework and threat modellingKnowledge of Software Composition Analysis (SCA) and container security principlesExperience with Identity and Access Management (IAM) and Cloud Infrastructure Entitlement Management (CIEM)Professional Skills
Proven track record of delivering complex security implementation projects on time and within scopeStrong analytical and problem-solving capabilitiesExcellent communication skills with ability to articulate technical concepts to diverse audiencesExperience working in Agile environments and collaborating with cross-functional teams We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.
Together, we make the extraordinary happen.
Learn more about us at ncs.co and visit our LinkedIn career site.
Scam Alert
We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.
Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at [email protected].