Leader: Vulnerability Mgmt, Red Team & Threat Intel

AirAsia; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Job summary

AirAsia Berhad seeks a senior Cyber Security leader to own and evolve our vulnerability management program across multi-cloud and legacy environments. You will define risk-based prioritization, drive remediation timelines with ICT and SRE, and communicate progress to senior leadership.

You will also define penetration testing strategy, manage internal and external testers, and oversee post-assessment remediation validation.

Qualifications

• 10+ years in Cyber Security with focus on vulnerability management, pentesting, threat intel and red teaming.
• Bachelor's degree in Computer Science, Information Security, or related field.
• Industry certifications (OSCP, GXPN, GPEN, CISSP, CISM or equivalent) advantageous.

Responsibilities

• Own and evolve end-to-end vulnerability management program across multi-cloud, modern infrastructure, and legacy environments.
• Define risk-based prioritization logic combining vulnerability severity (CVSS), asset criticality, and exploitability metrics.
• Collaborate with ICT, SRE, and business units to enforce remediation timelines and drive patching accountability.
• Define operational strategy and schedule for penetration testing and red teaming exercises; manage vendors/testers.
• Build and integrate a Cyber Threat Intelligence program to detect indicators and TTPs; conduct proactive threat hunting.
• Lead and mentor a team of vulnerability analysts, testers, and threat researchers; provide technical guidance.

Skills

Vulnerability Management

Penetration Testing

Threat Intelligence

Red Teaming

CVSS / EPSS risk scoring

Cloud security

Stakeholder communication

Leadership

Education

Bachelor's degree in Computer Science / Information Security

Job description

AirAsia Berhad seeks a senior Cyber Security leader to own and evolve our vulnerability management program across multi-cloud and legacy environments. You will define risk-based prioritization, drive remediation timelines with ICT and SRE, and communicate progress to senior leadership.

You will also define penetration testing strategy, manage internal and external testers, and oversee post-assessment remediation validation.