Junior Vulnerability Management Analyst

Infineon Technologies; Malacca City; On-site; MYR 60,000 - 100,000; Full time

Job summary

A global leader in semiconductor solutions, Infineon Technologies is seeking a cybersecurity professional to conduct vulnerability assessments and analyze threats. This role requires a degree in Cybersecurity or a related field, hands-on experience in risk evaluation, and strong analytical skills. Join a diverse and inclusive team to drive innovative solutions in green energy and smart IoT.

Qualifications

• Hands-on experience in vulnerability assessments and threat analysis required.
• Effective communication skills are necessary for explaining security risks.
• Familiarity with security frameworks like MITRE ATT&CK and OWASP Top10 is preferred.

Responsibilities

• Conduct comprehensive vulnerability assessments on applications, infrastructure, and networks.
• Analyze vulnerabilities to understand exploitability and potential risks.
• Develop detailed vulnerability reports with remediation plans.

Skills

Vulnerability assessments

Threat analysis

Risk evaluation

Analytical skills

Communication skills

Education

Bachelor's or Master’s degree in Cybersecurity

Cyber Security certifications

Tools

Vulnerability scanning tools

Job description

Job Description

In your new role you will:

• Handle threats & risk severity analysis, including assessment of vulnerabilities and potential impacts.
• Be accountable for prioritization & remediation support, ensuring timely mitigation of security issues.
• Handle vulnerability reporting and documentation, maintaining accurate records of findings and actions.
• Involve in Red Team & Penetration Testing Support (Preferred).

Responsibilities

• Conduct comprehensive vulnerability assessments on applications, infrastructure, and networks.
• Analyze vulnerabilities to understand exploitability, attack vectors, and potential risks.
• Perform manual validation and verification of findings to reduce false positives.
• Work with internal teams to ensure timely patching and remediation of identified security weaknesses.
• Evaluate vulnerabilities based on severity, impact, and real-world exploitability.
• Assess risks in the context of business operations and critical asset protection.
• Stay updated on the latest threat intelligence, CVEs, and emerging attack techniques.
• Develop mitigation strategies for critical vulnerabilities.
• Prioritize vulnerabilities based on risk levels in collaboration with security and infrastructure teams.
• Provide actionable recommendations to reduce exposure and improve security posture.
• Coordinate patch management efforts and alternative mitigation approaches.
• Support compliance with industry security frameworks.
• Develop detailed vulnerability reports, including root cause analysis and remediation plans.
• Create dashboards and metrics to track vulnerability trends and remediation progress.
• Maintain accurate documentation of security assessments, findings, and corrective actions.
• Present findings to stakeholders and leadership clearly and effectively.
• Utilize penetration testing techniques to validate and exploit vulnerabilities where applicable.
• Collaborate with Red Team members to simulate real-world attack scenarios.
• Understand and communicate how vulnerabilities can be exploited to inform remediation strategies.
• Support security testing initiatives, such as internal/external penetration tests.

Your Profile

• Bachelor's or Master’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Hands-on experience in vulnerability assessments, threat analysis, and risk evaluation.
• Strong understanding of vulnerabilities, attack vectors, and exploitation techniques.
• Familiarity with vulnerability scanning tools.
• Knowledge of patch management, security hardening, and remediation processes.
• Strong analytical skills for risk prioritization and mitigation planning.
• Effective communication skills for explaining security risks and strategies.
• Experience with security frameworks such as MITRE ATT&CK, OWASP Top10, and NIST CSF.
• Experience with Vulnerability Assessment & Analysis is preferred.
• Experience with penetration testing or Red Team techniques is an advantage.
• Familiarity with exploit development and ethical hacking methodologies.
• Basic understanding of secure coding practices and application security.
• Certifications in Cyber Security are a plus.

#WeAreIn for driving decarbonization and digitalization.

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables innovative solutions for green energy, clean mobility, and smart IoT. We foster a diverse and inclusive environment, emphasizing trust, respect, and equal opportunities for all applicants and employees.

Please inform your recruiter if you need accommodations during the interview process.