Vulnerability Management Consultant

Zimaw LLC; Subang Jaya; Hybrid; MYR 89,000 - 167,000; Full time

Job summary

Jora Malaysia is seeking a vulnerability management consultant to design, operate, and continuously improve enterprise vulnerability management capabilities for client engagements.

The role involves assessing capabilities across vulnerability identification, prioritization, remediation, and reporting, and proposing tool integrations and automation to enhance workflows and governance. Knowledge transfer and implementation guidance will be provided to internal teams.

Responsibilities

• Assessing existing capabilities related to vulnerability identification, prioritization, remediation, and reporting.
• Identifying opportunities to leverage existing tools or introduce additional solutions to strengthen the Vulnerability Management process.
• Providing recommendations for tool integration, workflow optimization, and configuring and tuning security tools.
• Developing best-practice processes, dashboards, reporting mechanisms, and governance frameworks to support ongoing Vulnerability Management activities.
• Conducting knowledge transfer sessions and providing implementation guidance to internal teams.
• Assess the capabilities of Google Chronicle in supporting Vulnerability Management activities.
• Identify opportunities to automate vulnerability ingestion, enrichment, prioritization, escalation, remediation tracking, and reporting.
• Evaluate integration options between Google Chronicle and existing security tools such as ticketing systems (ServiceNow).
• Recommend and implement configurations that align with organizational security requirements and operational workflows including API scripting.
• Develop automation use cases and best-practice workflows to improve vulnerability management efficiency and effectiveness.
• Ensure a scalable, automated, end-to-end Vulnerability Management process that meets the organization’s functional, operational, and reporting requirements while maximizing existing security investments.

Job description

Jora Malaysia will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Location: KL, Malaysia – Hybrid, 1–2 days onsite per week

Contract: Freelance

Role Summary

The vulnerability management consultant is responsible for helping clients design,

operate and continuously improve enterprise vulnerability management capability.

Key Responsibilities

• Assessing existing capabilities related to vulnerability identification, prioritization, remediation, and reporting.
• Identifying opportunities to leverage existing tools or introduce additional solutions to strengthen the Vulnerability Management process.
• Providing recommendations for tool integration, workflow optimization, and Configuring and tuning the selected security tools to suit vulnerability Developing best-practice processes, dashboards, reporting mechanisms, and governance frameworks to support ongoing Vulnerability Management activities.
• Conducting knowledge transfer sessions and providing implementation guidance to internal teams.
• Assess the capabilities of Google Chronicle in supporting Vulnerability Management activities.
• Identify opportunities to automate vulnerability ingestion, enrichment, prioritization, escalation, remediation tracking, and reporting.
• Evaluate integration options between Google Chronicle and existing security tools such as ticketing systems (ServiceNow).
• Recommend and implement configurations that align with organizational security requirements and operational workflows that would include API scripting.
• Develop automation use cases and best-practice workflows to improve vulnerability management efficiency and effectiveness.
• Ensure a scalable, automated, and end-to-end Vulnerability Management process that meets the organization's functional, operational, and reporting requirements while maximizing the capabilities of existing security investments.