About this role
We are seeking a Vulnerability Management System Engineer to join our Cyber team. This is an entry-level Day 1 role where you will support the design and implementation of enterprise-grade vulnerability management solutions. Working alongside senior engineers, you will gain hands-on experience with cutting-edge platforms such as Tenable and Rapid7 while contributing to robust security solutions for our clients.
Job Description
Implementation Support
Assist in the deployment and configuration of Tenable (Nessus, Tenable.io, Tenable.sc) and Rapid7 (InsightVM, Nexpose) platformsSupport the installation of vulnerability scanners, agents, and sensors across cloud, hybrid, and on-premises environmentsConfigure scanning schedules, credential management, and basic network segmentation under supervisionAssist with Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) implementationsSupport container security deployments and basic Kubernetes Security Posture Management (KSPM) configurationsTechnical Configuration & Testing
Perform vulnerability scans and validate scan results across diverse infrastructure environmentsConfigure and test integration points with ticketing systems, SIEM platforms, and security toolsAssist in setting up compliance scanning policies (CIS, NIST, PCI-DSS, ISO 27001)Support API integrations and basic automation workflowsConduct quality assurance testing of implemented solutions Documentation & Reporting
Create and maintain technical documentation including configuration guides and runbooksDocument implementation steps, configurations, and troubleshooting proceduresGenerate vulnerability reports and compliance dashboardsAssist in preparing handover documentation for Day 2 operations teamsMaintain accurate project records and implementation logs Learning & Development
Participate in knowledge transfer sessions with senior engineers and client teamsStay current with vulnerability management best practices and emerging threatsLearn about security frameworks, compliance requirements, and industry standardsDevelop proficiency in scripting and automation for security workflowsBuild expertise in cloud security and DevSecOps practices Technical Foundation
Due to project sensitivity, we can only consider Singapore Citizen1-3 years of experience in cybersecurity, IT infrastructure, or related technical rolesBasic understanding of vulnerability management concepts and security principlesExposure to Tenable or Rapid7 platforms (hands-on experience, training, or certifications)Familiarity with operating systems (Windows, Linux) and networking fundamentalsBasic knowledge of cloud platforms (AWS, Azure, or GCP)Understanding of CVE/CVSS frameworks and vulnerability assessment methodologies Technical Skills
Comfortable working with command-line interfaces and basic scripting (Python, PowerShell, or Bash)Understanding of network protocols, firewalls, and security architecturesAbility to read and interpret technical documentationBasic knowledge of security compliance frameworks (CIS Benchmarks, NIST, ISO 27001)Willingness to learn Infrastructure as Code (IaC) and CI/CD concepts Professional Attributes
Strong attention to detail and commitment to qualityExcellent problem-solving mindset and eagerness to learnGood communication skills with ability to work collaboratively in teamsSelf-motivated with ability to work under guidance and supervisionAdaptable and comfortable working in fast-paced project environments We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.
Together, we make the extraordinary happen.
Learn more about us at ncs.co and visit our LinkedIn career site.
Scam Alert
We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.
Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at [email protected].