Lead Vulnerability Management & Application Security

StarHub; Petaling Jaya; On-site; MYR 180,000 - 260,000; Full time

Job summary

StarHub in Malaysia seeks a Lead Vulnerability Management & Application Security Engineer to lead the identification, assessment, prioritization, and remediation tracking of security vulnerabilities across our technology environment. You will collaborate with application, infrastructure, cloud, and security teams to reduce cyber risk through a structured, risk-based programme.

The role requires hands-on experience with vulnerability scanning tools (Tenable/Nessus and Qualys), strong

Qualifications

• Experience in vulnerability management, security operations, or related cybersecurity functions.
• Hands-on experience with vulnerability scanning tools (Tenable/Nessus and Qualys).
• Understanding of vulnerability management processes, CVSS, remediation verification, and reporting.

Responsibilities

• Operate and maintain vulnerability scanning platforms (Tenable/Nessus, Qualys).
• Conduct authenticated and unauthenticated scans across servers, endpoints, cloud workloads, and apps.
• Analyse findings, validate, reduce false positives, assess risk.
• Oversee end-to-end vulnerability lifecycle from discovery to closure.

Skills

Vulnerability management

Application security

Security operations

CVSS & risk assessment

Stakeholder communication

Education

Degree in Cybersecurity/IT/CS

Tools

Tenable/Nessus

Qualys

Jira

ServiceNow

Fortify

SonarQube

Job description

StarHub in Malaysia seeks a Lead Vulnerability Management & Application Security Engineer to lead the identification, assessment, prioritization, and remediation tracking of security vulnerabilities across our technology environment. You will collaborate with application, infrastructure, cloud, and security teams to reduce cyber risk through a structured, risk-based programme.

The role requires hands-on experience with vulnerability scanning tools (Tenable/Nessus and Qualys), strong