Cybersecurity Vulnerability Management Analyst

Lancesoft Malaysia; Kuala Lumpur; Sur place; MYR 90 000 - 150 000; Plein temps

Résumé du poste

Lancesoft Malaysia seeks a Cyber Threat & Vulnerability Management (CTVM) Analyst to support ongoing vulnerability management and risk mitigation. You will coordinate VAPT exercises, perform scans, and prioritize remediation across IT assets.

Collaborating with SOC, MDR, and IT teams, you will track remediation progress, contribute to security governance, and deliver dashboards and reports on risk and compliance.

Qualifications

• Bachelor's degree or higher in CS/IT/Cybersecurity or related field.
• Minimum 4 years of experience in cybersecurity, vulnerability management, SOC operations, or related domains.
• Solid understanding of IT infrastructure, networks, OS, cloud environments, and security principles.
• Experience with vulnerability assessment, scanning, patch management, risk prioritization, and remediation processes.
• Familiarity with tools like Nessus, CrowdStrike Falcon, Burp Suite, and MDR services.

Responsabilités

• Support the CTVM program implementation and ongoing management.
• Coordinate VAPT exercises and conduct internal/external vulnerability scans.
• Identify, assess, and prioritize vulnerabilities by severity and business impact.
• Coordinate remediation activities including patching and upgrades.
• Maintain IT asset inventories across on-prem and cloud.
• Monitor remediation progress and escalate timelines.
• Support policy, governance, and regulatory compliance efforts.
• Monitor emerging threats and assess impact on IT environment.
• Collaborate with SOC, MDR, and IT teams on investigations and remediation.
• Maintain KPIs, KRIs, dashboards, and management reports.
• Prepare regular reports on exposure, remediation, and risk.
• Provide cybersecurity guidance to stakeholders to strengthen security posture.
• Stay updated on threats and best practices.

Connaissances

Cyber Threat Management

Vulnerability Management

VAPT

Vulnerability Scanning

Risk Assessment

Patch Management

Remediation Tracking

SOC Coordination

Security Monitoring

IT Asset Inventory

Cloud Security

Cybersecurity Governance

KPI/KRI Reporting

Formation

Bachelor's degree in Computer Science / IT / Cybersecurity

Outils

Nessus

CrowdStrike Falcon

Burp Suite

AWS Security Tools

MDR Solutions

ServiceNow

Jira

Description du poste

Job Description: Cyber Threat & Vulnerability Management (CTVM) Analyst

Job Summary

We are looking for a Cyber Threat & Vulnerability Management (CTVM) Analyst to support the implementation and ongoing management of the organization's cybersecurity and vulnerability management program. The ideal candidate will have experience in vulnerability assessments, VAPT coordination, risk prioritization, remediation tracking, and security monitoring. The role involves collaborating with internal IT teams, Security Operations Centers (SOC), Managed Detection and Response (MDR) providers, and other stakeholders to identify and mitigate cybersecurity risks.

Key Responsibilities

• Support the implementation, execution, and ongoing management of the Cyber Threat and Vulnerability Management (CTVM) program.
• Coordinate Vulnerability Assessment and Penetration Testing (VAPT) exercises and conduct internal and external vulnerability scans.
• Identify, assess, track, and prioritize vulnerabilities based on severity, risk exposure, and business impact.
• Coordinate vulnerability remediation activities, including security patching, infrastructure updates, and application upgrades.
• Maintain accurate inventories of IT hardware, software, and cloud assets to support vulnerability and risk management activities.
• Monitor remediation progress and follow up with relevant stakeholders to ensure vulnerabilities are addressed within agreed timelines.
• Support the development, maintenance, and implementation of cybersecurity policies, procedures, governance frameworks, and regulatory compliance requirements.
• Monitor emerging cyber threats and vulnerabilities and assess their potential impact on the organization's IT environment.
• Collaborate with SOC teams, MDR providers, and internal IT teams to investigate security findings and coordinate incident remediation.
• Maintain cybersecurity Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), dashboards, and management reports.
• Prepare regular reports on vulnerability exposure, remediation status, security risks, and compliance performance.
• Provide cybersecurity guidance and recommendations to stakeholders to improve security posture and reduce organizational risk.
• Stay updated on emerging cybersecurity threats, vulnerability trends, security technologies, and industry best practices.

Person Specifications / Requirements

• Bachelor's degree in Computer Science, Information Technology, IT Security, Cybersecurity, or a related field.
• Minimum 4 years of experience in cybersecurity, vulnerability management, SOC operations, penetration testing, cyber threat intelligence, or a related domain.
• Basic understanding of IT infrastructure, networking, operating systems, cloud environments, and cybersecurity principles.
• Familiarity with vulnerability assessment, vulnerability scanning, patch management, risk prioritization, and remediation processes.
• Exposure to vulnerability management and security tools such as:
• Nessus
• CrowdStrike Falcon
• Burp Suite
• AWS Security Tools
• Managed Detection and Response (MDR) solutions
• ServiceNow
• Jira
• Understanding of cybersecurity governance, security policies, procedures, and regulatory compliance.
• Ability to maintain IT asset inventories and track vulnerabilities across infrastructure, applications, and cloud assets.
• Experience preparing security dashboards, KPIs, KRIs, and management reports.
• Strong analytical, problem-solving, organizational, communication, and teamwork skills.
• Ability to coordinate with technical teams and stakeholders to drive timely vulnerability remediation.

Preferred Qualifications

• Relevant cybersecurity or vulnerability management certifications, such as Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), or equivalent certifications.
• ITIL certification or knowledge of IT service management processes.
• Exposure to vulnerability management frameworks, security risk assessment methodologies, and cybersecurity best practices.
• Experience working with enterprise security teams, SOC/MDR providers, and cross-functional IT teams.

Key Skills

Cyber Threat Management | Vulnerability Management | VAPT | Vulnerability Scanning | Risk Assessment | Patch Management | Remediation Tracking | SOC Coordination | Security Monitoring | IT Asset Inventory | Cloud Security | Cybersecurity Governance | KPI/KRI Reporting