Vulnerability Assessment Analyst

Verinon Technology Solution; Kuala Lumpur; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading technology solutions provider is seeking a professional for vulnerability assessment and penetration testing. The role requires solid knowledge of OWASP guidelines and experience in code review. Candidates should possess analytical and problem-solving skills, as well as familiarity with security testing tools. This position is critical in enhancing security measures and ensuring compliance with service level agreements in a challenging technological environment.

Qualifications

• Solid understanding of OWASP Top 10 and CVSS.
• Proven experience in code review and vulnerability assessment.
• Familiar with security testing tools.

Responsibilities

• Conduct vulnerability assessments and penetration testing.
• Research and provide advisories on vulnerabilities.
• Manage vulnerability remediation processes.

Skills

Understanding of OWASP Top 10

Code review experience

Analytical skills

Problem-solving skills

Tools

Security testing tools

Job description

Responsibilities

• Vulnerability Assessment and penetration testing (application and infrastructure)
• Vulnerability research and advisory
• Vulnerability management and remediation
• Threat and risk assessment
• Facilitation and communication skills

Qualifications

• Solid understanding of OWASP Top 10, OWASP ASVS, CVSS, CVE/CWE, NIST, RMIT, etc.
• Proven experience in code review and vulnerability assessment.
• Strong understanding of software lifecycle and methodologies.
• Knowledge of secure coding practices and common security vulnerabilities.
• Familiarity with security testing tools, such as dynamic/interactive/static analysis scanner, infrastructure security scanner and penetration testing framework.
• Excellent analytical and problem-solving skills.

IT technical skill knowledge with relevant expertise Critical Success Factors:

Challenges

• To complete the vulnerability assessment and penetration testing within the service level agreement.
• To keep abreast with up-to-date technology advances and to enhance necessary skills for effective and efficient service delivery.
• To manage stringent service level agreements for mission-critical business services or applications.