Cyber Threat & Vulnerability (CTV) Analyst
Petaling Jaya, Malaysia
Our client is a well known leading IT provider in Malaysia and currently looking for a Cyber Threat & Vulnerability (CTV) Analyst.The CTV Analyst will assist the Manager insupporting the planning, execution, and monitoring of the organization Cyber Threat &Vulnerability Management (CTVM) program. This role involves performing and managingvulnerability scans, coordinating remediation efforts, proactively monitoringthreats, maintaining asset inventories in collaboration with IT, and supportingcybersecurity governance and compliance initiatives.
Job Duties
- A ssist the Manager in planning,analyzing, developing frameworks, and deploying the organization CTVM program.
- Support daily operations,including coordination VAPT exercises with vendors, performing on-demand internaland external vulnerability scans, scheduling, prioritization, and remediationtracking.
- Maintain a current andcomprehensive inventory of all IT hardware, software, and cloud assets withinthe organization in collaboration with IT.
- Assist in identifyingvulnerabilities and supporting remediation plans, including patching, code orinfrastructure changes, and build process updates.
- Assist in implementingcybersecurity and IT security policies to ensure compliance with internal andregulatory standards.
- Support the development ofpolicies, procedures, and standard operating models for the CTVM program.
- Assist on KPIs and KRIs forcybersecurity operations. Maintain technical and management dashboards andassist in preparing periodic management reports.
- Provide technical support andadvisory services to stakeholders to ensure enterprise-wide cyber resilience.
- Support security monitoringactivities (i.e. SOC, MDR) in collaboration with vendors and coordinateremediation efforts with internal IT team.
- Stay up to date on emergingcyber threats, vulnerabilities, and IT security trends relevant to theorganization and industry.
Requirements
- Minimum Bachelor’s Degreeor Equivalent with specialization in Computer Science / IT Security / CyberSecurity.
- 1-3 years of working experience in IT orCyber Security domains specifically in cyber threat and vulnerabilitymanagement, or Security Operations Center (SOC).
- Basic understanding of IT infrastructure,networking, and cybersecurity principles.
- Familiarity with vulnerability assessment,patch management, and security monitoring tools.
- Exposure to ServiceNow, Jira, Nessus, CrowdStrikeFalcon, MDR solutions, AWS native security tools and Burp Suite is a plus.
- Familiarwith ServiceNow and Jira for ticketing and workflow management.
- Familiarwith security tools such as Nessus Professional, CrowdStrike Falcon Complete,MDR solutions, Identity Threat Protection (ITP) and Burp Suite. Familiaritywith other security tools such as cloud native security solutions such as AWSis an added advantage.
- Strong analytical, problem-solving, andorganizational skills.
- Good communication and teamwork abilities.
- Certifications (not mandatory): Any relevant cyber and vulnerabilitymanagement tool or solution certification are advantageous. Any of CEH, ITIL,CISA, EC-Council or equivalentare advantageous.
- Relevant Experience (entry-level): Cyber threat and vulnerability management,Security Operations Center (SOC),Penetration testing,Cyber threat intelligence.
- Advantageous, but not mandatory: Any relevant cyber and vulnerabilitymanagement tool or solution certification; a ny of CEH, ITIL,CISA, EC-Council or equivalent