Vulnerability Assessment Engineer, Infrastructure Security

UOB; Kuala Lumpur; On-site; MYR 134,000 - 201,000; Full time

Job summary

6255 UOB Innovation Hub 2 Sdn Bhd in Malaysia seeks a Vulnerability Assessment Engineer to deliver and evolve the bank's vulnerability management program. You will manage attack surface reduction, coordinate advisories, and work with cross-functional teams to implement mitigations and drive security capabilities.

The role requires 5–7 years of experience in vulnerability management, familiarity with cloud technologies, containers, and leading security tooling such as Splunk, Nessus, and Qualys.

Qualifications

• Diploma or degree in engineering, CS, IT or Cyber Security
• Professional security qualification (e.g., SANS, CISSP, CISA, CISM) preferred
• 5–7 years of overall experience; 3–5 years in vulnerability management

Responsibilities

• Deliver vulnerability management services and maintain the bank's security product suite.
• Manage attack surface reduction and proactive vulnerability governance.
• Communicate advisories to application and infrastructure teams and track lifecycle.
• Provide guidance on mitigating controls in absence of fixes.
• Coordinate vulnerability responses with Security Operations Centre.
• Develop automation, contextual data, dashboards for management insights.
• Define requirements for new projects and perform PoC evaluations.
• Support audit and regulatory requests.
• Collaborate with internal teams and third parties for delivery of vulnerability services.

Skills

Analytical thinking

Troubleshooting

Vulnerability management

Education

Diploma/Degree in engineering/CS/IT/Cyber Security

Tools

Splunk

Python

Bash

Nessus

Qualys

Rapid7

Docker

Kubernetes

Job description

6255 UOB Innovation Hub 2 Sdn Bhd in Malaysia seeks a Vulnerability Assessment Engineer to deliver and evolve the bank's vulnerability management program. You will manage attack surface reduction, coordinate advisories, and work with cross-functional teams to implement mitigations and drive security capabilities.

The role requires 5–7 years of experience in vulnerability management, familiarity with cloud technologies, containers, and leading security tooling such as Splunk, Nessus, and Qualys.