Vulnerability Management Consultant (Tenable/Nessus)
Location: Malaysia – Hybrid, 1–2 days onsite per week
Contract: Freelance
Duration: Minimum 6 months
Start date: ASAP
Working language: English
About the Assignment
We are looking for a mid-to-senior Vulnerability Management Consultant. They will contribute to the daily operation of the vulnerability management function while helping improve its processes, workflows and technical pipelines. This role requires strong hands-on experience with Tenable/Nessus, ServiceNow and stakeholder coordination.
Key Responsibilities
- Manage and support day-to-day vulnerability scanning activities using Tenable/Nessus.
- Review, validate and prioritize vulnerability findings based on risk and business impact.
- Coordinate remediation activities with infrastructure, security, application and business teams.
- Track vulnerabilities, remediation progress and related workflows through ServiceNow.
- Improve vulnerability management processes, pipelines, reporting and automation.
- Monitor remediation timelines, exceptions and recurring vulnerabilities.
- Prepare clear reports and communicate risks and progress to technical and non-technical stakeholders.
- Support the continuous improvement of the overall vulnerability management programme.
Required Experience
- Proven mid-to-senior-level experience in vulnerability management or cybersecurity operations.
- Strong hands-on experience with Tenable and/or Nessus.
- Practical experience using ServiceNow for vulnerability tracking, remediation workflows or ticket management.
- Good understanding of vulnerability lifecycle management, CVE, CVSS, risk prioritization and remediation.
- Experience working with multiple technical and business stakeholders.
- Ability to improve existing processes and identify opportunities for automation.
- Strong written and spoken English.
- Ability to work onsite in Malaysia 1–2 days per week.
Nice to Have
- Experience with ServiceNow Vulnerability Response.
- Knowledge of risk-based vulnerability management.
- Experience integrating vulnerability tools with ServiceNow or other security platforms.
- Scripting or automation experience using APIs, PowerShell or Python.
- Experience working in an international enterprise environment.
Application
Please submit your CV in English: *************