Vulnerability Management System (VMS) Engineer

Responsibilities

• Manage and oversee the vulnerability management lifecycle, including intake, validation, prioritisation, tracking, and reporting of vulnerabilities.
• Act as the primary liaison with external security vendors performing VA, PT, NVA, and HCS activities.
• Review and validate assessment results to ensure accuracy, completeness, and relevance before dissemination.
• Coordinate with internal application, infrastructure, and platform teams to drive remediation efforts, ensuring issues are addressed within defined timelines.
• Track remediation progress, perform follow-ups, and elevate overdue items to ensure accountability and closure.
• Ensure the quality and consistency of vulnerability findings, including proper severity classification using industry standards such as CVSS.
• Maintain centralised tracking through the Vulnerability Management System (VMS), ensuring data integrity and audit readiness.