DevSecOps Engineer: Vulnerability Triage & Automation Expert

Prudential plc; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Prudential plc is seeking a proactive Security Engineer to join the Vulnerability Operations Centre in Kuala Lumpur. The role focuses on triaging and enriching vulnerability findings, coordinating with application teams, and driving automation across DevSecOps workflows to improve triage accuracy and efficiency.

You will work with BISOs, developers and security colleagues across Asia, Africa and the UK to implement robust vulnerability management practices and strengthen application and API

Qualifications

• Familiarity with CVSS, CWE, CVE, MITRE ATT&CK and related scoring.
• Ability to explain threats like SQL injection, XSS, CSRF, SSRF, RCE.
• Proficient in scripting languages (JS, Python, PowerShell, Bash) and automation.
• Extensive knowledge of vulnerability assessment tools and threat modelling.
• Strong analytical and communication skills for cross-team coordination.
• Ability to write clear technical documentation and SOPs.

Responsibilities

• Triage and enrich vulnerability findings across application security testing tools.
• Collaborate with application teams, DevOps and BISOs to explain risks.
• Drive automation and integration of tools into triage workflows.
• Prepare documentation and playbooks; maintain risk decisions and triage actions.
• Support PoC/PoV and tool selection.

Skills

JS

Python

PowerShell

Bash

Automation platforms

Education

Bachelor's degree in Information Security

Equivalent qualification

Tools

SAST

DAST

SCA

Container scanners

Job description

Prudential plc is seeking a proactive Security Engineer to join the Vulnerability Operations Centre in Kuala Lumpur. The role focuses on triaging and enriching vulnerability findings, coordinating with application teams, and driving automation across DevSecOps workflows to improve triage accuracy and efficiency.

You will work with BISOs, developers and security colleagues across Asia, Africa and the UK to implement robust vulnerability management practices and strengthen application and API