Vulnerability Management Analyst – APAC Shift

About the role

A global technology consulting firm is looking for a Vulnerability Management Analyst to join the APAC shift of a new follow-the-sun vulnerability triage service. The service runs 24 hours a day, five days a week across APAC, North America and EMEA, and consists of five analysts. You will decide, for each newly disclosed vulnerability, whether it matters to the customer, how much and why. The position is 100% remote, based in Singapore, and covers the APAC shift.

Key responsibilities

• Triage newly disclosed vulnerabilities and assess their relevance and impact to the customer's applications and assets
• Assess exploitability using threat intelligence, exploit and proof-of-concept details, and likely attack paths
• Assign severity and risk ratings mapped to CVE, CPE and CVSS, with a clear rationale for each
• Keep audit-ready case notes that hand over cleanly to colleagues in other time zones
• Support business-as-usual triage alongside urgent escalations when something critical arises

Required profile

• Minimum 12-month contract; day rate on application
• Ability to read disclosures, advisories and exploit information and judge real-world risk
• Broad familiarity with enterprise platforms such as Microsoft, VMware, Oracle/Java, Citrix and F5, including their patch and release cycles
• Comfortable working across cloud environments and large-scale open-source use in enterprise estates
• Strong prioritisation and an operations mindset, able to balance several cases at once

Required skills

• Hands-on vulnerability triage and risk assessment across the full vulnerability management workflow
• Fluency in CVE, CPE and CVSS
• Clear technical writing so impact, actions and priorities are easy to act on

What we offer

• A minimum 12-month engagement helping build a new global service
• Fully remote working
• Daily collaboration with counterparts in North America and EMEA

The recruiter is LT Harper, acting on behalf of the client. Candidates who meet most but not all of the essentials are encouraged to apply.