Infra Security & Vulnerability Engineer

UOB; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

6255 UOB Innovation Hub 2 Sdn Bhd is seeking a security-focused professional to lead vulnerability management for the bank's technology estate in Malaysia. You will reduce attack surfaces, advise on mitigations, and coordinate responses across IT teams and the security operations center.

Hands-on with Splunk, Nessus, Qualys, and cloud/container tech is expected. The role requires 5–7 years in IT/security, with 3–5 years in managing vulnerability services, and a strong foundation in

Qualifications

• 5–7 years of overall experience in security or IT working with vulnerability management.
• 3–5 years deploying and managing Vulnerability Management services and technologies.
• Familiar with Windows, Unix/Linux, networking, and cloud technologies.
• Knowledgeable in container tech (Docker/Kubernetes) and security tooling.

Responsibilities

• Manage attack surface reduction and proactive vulnerability management.
• Communicate and report product vulnerabilities to teams and monitor lifecycle.
• Provide mitigations and guidance when fixes are unavailable.
• Coordinate vulnerability response with security operations and audits.
• Develop automation, data sets, reports, and dashboards for risk insights.
• Research products, define requirements, and perform PoC for new projects.
• Support audit/regulatory requests and liaise with vendors.

Skills

Vulnerability Management

Analytical thinking

Troubleshooting

Python

Bash

Splunk

Docker

Kubernetes

Nessus

Qualys

Rapid7

Cloud platforms

Education

Diploma/Degree in engineering/Computer Science/IT/Cyber Security

Security-related qualification (e.g., SANS, CISSP, CISA, CISM)

Tools

Splunk

Nessus

Qualys

Rapid7

Docker

Kubernetes

Job description

6255 UOB Innovation Hub 2 Sdn Bhd is seeking a security-focused professional to lead vulnerability management for the bank's technology estate in Malaysia. You will reduce attack surfaces, advise on mitigations, and coordinate responses across IT teams and the security operations center.

Hands-on with Splunk, Nessus, Qualys, and cloud/container tech is expected. The role requires 5–7 years in IT/security, with 3–5 years in managing vulnerability services, and a strong foundation in