Zimaw LLC Hiring! Full Time Vulnerability Management Consultant (Tenable-Nessus) in Selangor - Ricebowl

Location: Malaysia/ Hørsholm, Denmark – Hybrid, 1–2 days onsite per week

Contract: Freelance

Duration: Minimum 6 months

Start date: ASAP

Working language: English

Role Summary

The vulnerability management consultant is responsible for helping clients design,

operate and continuously improve enterprise vulnerability management capability.

The role covers vulnerability management tools, API scripting, integration & endto-end automation processes.

Key Responsibilities

• Assessing existing capabilities related to vulnerability identification, prioritization,

remediation, and reporting.

• Identifying opportunities to leverage existing tools or introduce additional

solutions to strengthen the Vulnerability Management process.

• Providing recommendations for tool integration, workflow optimization, and

operational efficiencies.

• Configuring and tuning the selected security tools to suit vulnerability

management automation requirements.

• Developing best-practice processes, dashboards, reporting mechanisms, and

governance frameworks to support ongoing Vulnerability Management activities.

• Conducting knowledge transfer sessions and providing implementation

guidance to internal teams.

• Assess the capabilities of Google Chronicle in supporting Vulnerability

Management activities.

• Identify opportunities to automate vulnerability ingestion, enrichment,

prioritization, escalation, remediation tracking, and reporting.

• Evaluate integration options between Google Chronicle and existing security

tools such as ticketing systems (ServiceNow).

• Recommend and implement configurations that align with organizational

security requirements and operational workflows that would include API

scripting.

• Develop automation use cases and best-practice workflows to improve

vulnerability management efficiency and effectiveness.

• Ensure a scalable, automated, and end-to-end Vulnerability Management

process that meets the organization's functional, operational, and reporting

requirements while maximizing the capabilities of existing security investments.

Key Skills

• Vulnerability Management

• Microsoft Suite

• Google Chronicle

• Tenable

• API Scripting

• Tools Automatio