Vulnerability Analyst

The Patch and Vulnerability Management resource is responsible for establishing, maintaining, and continuously improving the Infrastructure Patch and Vulnerability management scope and compliance.
The resource will collaborate closely with all infrastructure and security teams, application system owners and internal security and audit functions to drive compliance for Patching and Vulnerabilities shared on Infrastructure teams.

Vulnerability Management

• To review the overall Vulnerability ticket observations like Internal VA, External VA, Weak Ciphers related vulnerabilities etc raised by internal security team on the Infrastructure teams on various domains like Servers, network devices, SSL certificates, SHA TLS protocols, storage devices, AS400, HPNS.
• Drive updates and closures of those Vulnerability Management tickets with Infrastructure teams basis severity and deadlines.
• To ensure that all tickets have necessary risk assessment done and required documentation is in place.
• Track the Security observations raised on Infra teams and periodically highlight exceptions to management.
• Collaborate closely with Technology Security, Application custodians and Infrastructure teams to ensure that the relevant observations are closed by applying necessary fixes/patches.
• Create and maintain Power-BI dashboards to manage the overall process of vulnerability management and highlight exceptions.
• Weekly reporting to management on the overall VA compliance.

Patch Management

• Ensure that Patch Management process and compliance criteria are understood clearly.
• Maintain Patch schedules for all devices in the infrastructure domain to have a clear view of all devices. This includes all technologies like servers (Windows, Linux, AIX, Solaris), Network devices, Storage, AS400, HPNS etc.
• To review the overall stack of servers and ensure that all stakeholders have a plan to patch so there are no non-compliance scenarios for Patch Management.
• Drive the Infrastructure teams to complete patching across all the devices in the planned windows.
• To ensure that accurate information to be reflected in the Patch Management dashboards so top management has the correct view of patching compliance.
• Create and maintain Power-BI dashboards to manage the overall process of patch management and drive exceptions.
• Weekly reporting to management on the overall Patching compliance.

Skills/Requirement:
Education & Experience

• Bachelor’s degree in information security, Computer Science, Engineering, or related field.
• 3–7 years of experience in patch management, systems hardening, or cybersecurity operations.

Technical Skills

• Strong knowledge of operating systems (Windows, Linux, Unix) and their hardening practices.
• Familiarity with CIS Benchmarks, NIST, ISO 27001, MAS TRM, or equivalent frameworks.
• Experience with Patch and Vulnerability management tools such as:
• Big Fix
• Digital Twin
• Tanium
• Ansible, Chef, or Puppet
• Vulnerability scanners (Tenable, Qualys)

Power BI

Advanced knowledge of excel

• Understanding of cloud platforms (Azure, AWS, GCP) and cloud security controls.

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent communication skills for cross-team collaboration.
• Ability to work independently and manage multiple priorities.

Strong attention to detail with a focus on accuracy and quality.

Interested candidates, who wish to apply for the above position, please send in your resume [email protected] 

We regret to inform that only shortlisted candidates will be contacted PERSOL Singapore Pte Ltd EA License No. 01C4394 EA Reg No: R24123179 (Ajay Sharma)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.