Infra Security Vulnerability Engineer

UOB Innovation Hub 2 Sdn Bhd; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

UOB Innovation Hub 2 Sdn Bhd is seeking a Vulnerability Assessment Engineer to design, develop, deploy and maintain vulnerability management capabilities across the bank’s technology estate. You will work with application and infrastructure teams and with the Threat Intelligence unit to deliver secure,-predictive analyses.

The role requires hands-on experience with vulnerability tooling, cloud platforms (AWS/Azure), Docker/Kubernetes, scripting and strong problem-solving skills.

Qualifications

• Diploma/Degree in engineering/Computer Science/IT/Cyber Security.
• Overall experience 5 – 7 years of experience.
• 3 to 5 years of relevant experience in managing and deploying Vulnerability Management services and technologies.
• Knowledgeable with vulnerability management technologies and industry best practices.
• Hands-on experience with security tools and vulnerability assessment platforms.

Responsibilities

• Delivery of vulnerability management services and day-to-day operations for the bank's security suite.
• Manage attack surface reduction and proactive vulnerability handling across technology estate.
• Report product vulnerabilities to application and infrastructure teams and monitor lifecycle with Threat Intelligence.
• Provide mitigations when fixes are unavailable; coordinate with SOC for critical vulnerabilities.
• Develop automation to improve processes, data sets, reports and dashboards.

Skills

Vulnerability Management

Splunk

Python

Bash

Nessus

Qualys

Docker

Kubernetes

AWS

Networking basics

Threat Intelligence

Education

Diploma/Degree in engineering/Computer Science/IT/Cyber Security

Tools

Nessus

Qualys

Rapid7

Splunk

Docker

Kubernetes

Job description

UOB Innovation Hub 2 Sdn Bhd is seeking a Vulnerability Assessment Engineer to design, develop, deploy and maintain vulnerability management capabilities across the bank’s technology estate. You will work with application and infrastructure teams and with the Threat Intelligence unit to deliver secure,-predictive analyses.

The role requires hands-on experience with vulnerability tooling, cloud platforms (AWS/Azure), Docker/Kubernetes, scripting and strong problem-solving skills.