Strategic Vulnerability & Threat Lead (Cloud/Containers)

Pinpoint Asia

Hong Kong

On-site

HKD 900,000 - 1,200,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Pinpoint Asia is recruiting a Threat & Vulnerability Management Lead for a large enterprise in Hong Kong. You will own the vulnerability lifecycle end-to-end, design comprehensive scanning programs, and build a prioritization framework that weighs asset criticality and exploit availability.

You will partner with IT infra, DevOps and vendors to drive remediation and integration of security tools. The role requires 7+ years in IT security, strong CVE/CVSS knowledge, patch management and ITSM

Qualifications

Seven or more years in IT security owning vulnerability and threat exposure management.
Deep knowledge of CVEs, CVSS scoring and exploit databases.
Hands-on experience with patch management tools and ITSM platforms for ticketing/workflow automation.
Strong understanding of OS, databases, network infra, and container/cloud environments.
Automation scripting skills and security certifications (CISSP/CISM/CISA) are preferred.

Responsibilities

Own the vulnerability management lifecycle end-to-end.
Design and run credentialed/non-credentialed scanning programs (agent-based, external/internal).
Build a prioritization framework considering asset criticality, exploit availability and data sensitivity.
Collaborate with IT infra, DevOps and vendors to drive remediation and integrate security tools.
Maintain and tune SOPs including patch management, disaster recovery and system monitoring.