Vulnerability Management Analyst (APAC)

Company - Our client is a Fortune 500 technology and consulting organization recognized for its leadership in cybersecurity, advanced technology, and digital transformation. The company delivers innovative solutions to complex enterprise challenges and offers opportunities to work on mission-critical security initiatives.

Job Title - Vulnerability Management Analyst (APAC)

Location - 100% Remote (APAC Region)

Role Type - Contract (Minimum 1 Year)

Must Have Skills:

• Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining enterprise exposure and impact.
• Strong expertise with CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, threat intelligence, proof-of-concept exploits, and assigning appropriate severity ratings.
• Broad enterprise technology knowledge across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and open-source technologies, including patch management and software release lifecycles.
• Excellent technical documentation and communication skills, with the ability to produce clear, accurate, audit-ready vulnerability assessments outlining exposure, impact, risk rationale, remediation recommendations, and escalation details.

Responsibilities and Job Details:

• Review, analyze, and triage newly disclosed vulnerabilities across a diverse enterprise technology environment.
• Determine whether identified vulnerabilities impact our client's applications, infrastructure, platforms, or other technology assets.
• Evaluate vulnerability exploitability using threat intelligence, security advisories, published exploits, proof-of-concept information, and potential attack paths.
• Assess enterprise exposure and assign defensible risk and severity ratings using CVE, CPE, CVSS, and organization-specific risk criteria.
• Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and enterprise open-source technologies.
• Research vendor security advisories, patch availability, and software release lifecycles to support vulnerability assessment and remediation recommendations.
• Maintain comprehensive, accurate, and audit-ready documentation detailing vulnerability exposure, business impact, risk assessments, recommended actions, and escalation decisions.
• Identify and escalate critical or high-risk vulnerabilities requiring immediate attention.
• Support ongoing vulnerability management operations to strengthen the organization's overall cybersecurity posture.
• Collaborate with globally distributed security teams to ensure seamless vulnerability triage and operational continuity across regional shifts.
• Participate in a 24x5 global vulnerability management coverage model, working an anticipated 8-hour daily shift and 40-hour workweek.
• Contribute to a fully remote, globally coordinated cybersecurity operation focused on timely vulnerability identification, assessment, and risk mitigation.