Vulnerability Management Specialist

AXA Group Operations; Puchong; On-site; MYR 120,000 - 180,000; Full time

Job summary

AXA Group Operations is seeking a cybersecurity professional to join the Cyber Defense Security Operations team. You will focus on Vulnerability Management and Application Security, turning vulnerability data into risk-based actions and guiding remediation across global infrastructure.

You will work with IT production and development teams, analyze security data, and drive remediation strategies with cross-functional stakeholders in a diverse, multinational environment.

Qualifications

• At least three years of professional experience in vulnerability management, application security or related cybersecurity discipline.
• Strong knowledge of vulnerability assessment and infrastructure security reviews.
• Understanding of SAST, DAST, patch management, network security, server administration and system hardening.
• Experience with vulnerability and application-security technologies such as Qualys, Tenable, Burp Suite or Checkmarx.
• Ability to analyse complex security information and convert it into focused, actionable recommendations.
• Confidence working with technical and non-technical stakeholders in an international environment.
• Strong written communication, presentation and problem-solving skills.
• A diploma, bachelor’s degree or equivalent learning and experience in IT, computer science, cybersecurity or a related field.

Responsibilities

• Lead vulnerability assessments across servers, network devices, web applications and supporting infrastructure.
• Identify and prioritise critical vulnerabilities based on technical exposure, business impact and risk appetite.
• Translate structured and unstructured security data into practical remediation recommendations.
• Advise IT production and application teams on effective, sustainable remediation strategies.
• Coordinate with local security and IT teams to drive vulnerabilities through to resolution.
• Recommend compensating controls when immediate remediation is not possible.
• Assess risk using established security methodologies and support risk-acceptance decisions.
• Maintain visibility of remediation progress and current exposure.
• Investigate security issues using vulnerability scans, alerts and web app security-testing results.

Skills

Vulnerability management

Application security

SAST

DAST

Security data analysis

Qualys

Tenable

Burp Suite

Checkmarx

Stakeholder communication

Risk analysis

Presentation skills

Problem solving

Education

Diploma / Bachelor's degree in IT, CS, cybersecurity

Tools

Qualys

Tenable

Burp Suite

Checkmarx

Job description

Why Join Us?

Join AXA Group Operations and help strengthen cybersecurity across a global, technology-led organisation.

Three Reasons To Consider This Opportunity

• Make a visible security impact: Identify critical vulnerabilities, influence remediation priorities and help protect business-critical infrastructure and applications.
• Work at global scale: Collaborate with security, IT production and application teams across an international organisation operating in 17 countries.
• Grow as a cybersecurity expert: Expand your expertise across vulnerability management, application security, risk analysis and security advisory.

About The Role

You will join the Cyber Defense Security Operations team, focusing on Vulnerability Management and Application Security. As a trusted technical specialist, you will turn vulnerability data into clear, risk-based actions. You will help teams understand their exposure, prioritise the issues that matter most and implement effective remediation or compensating controls. This role offers the opportunity to combine hands-on security expertise, data analysis and cross-functional influence in an organisation where technology and innovation are central to transformation.

What You’ll Do

• Lead vulnerability assessments across servers, network devices, web applications and supporting infrastructure.
• Identify and prioritise critical vulnerabilities based on technical exposure, business impact and risk appetite.
• Translate structured and unstructured security data into practical remediation recommendations.
• Advise IT production and application teams on effective, sustainable remediation strategies.
• Coordinate with local security and IT teams to drive vulnerabilities through to resolution.
• Recommend compensating controls when immediate remediation is not possible.
• Assess risk using established security methodologies and support appropriate risk-acceptance decisions.
• Maintain clear visibility of remediation progress, outstanding exposure and vulnerability status.
• Investigate security issues using vulnerability scans, alerts and web application security-testing results.

What You’ll Bring

• At least three years of professional experience in vulnerability management, application security or a closely related cybersecurity discipline.
• Strong knowledge of vulnerability assessment and infrastructure security reviews.
• Practical understanding of SAST, DAST, patch management, network security, server administration and system hardening.
• Experience with vulnerability and application-security technologies such as Qualys, Tenable, Burp Suite or Checkmarx.
• The ability to analyse complex security information and convert it into focused, actionable recommendations.
• Confidence working with technical and non-technical stakeholders in an international environment.
• Strong written communication, presentation and problem-solving skills.
• A diploma, bachelor’s degree or equivalent learning and experience in IT, computer science, cybersecurity or a related field.

What Will Make You Stand Out

• Experience applying security controls to operational technology services.
• Cybersecurity certifications such as CISSP, GWEB or CEH.
• Experience creating concise, decision-ready reporting with Microsoft Office, Power BI or similar tools.
• A methodical approach to ownership and follow-through, combined with a drive to improve efficiency.
• The ability to balance technical severity with business context when recommending priorities.

What We Offer

• The opportunity to influence vulnerability reduction across a large, international organisation.
• Exposure to infrastructure security, application security, Cyberdefense and risk management.
• Collaboration with skilled teams across security, technology, data and business operations.
• A role at the heart of AXA’s transformation into a sustainable, technology-led company.
• An environment that values innovation, courage, integrity, collaboration and customer focus.
• Meaningful opportunities to deepen your technical expertise and broaden your influence as a cybersecurity professional.

AXA is committed to equal opportunity and to creating a workplace where everyone is treated with dignity and respect. We welcome different backgrounds, experiences and perspectives, including applications from women, LGBTQ+ people, people with disabilities and people of all origins. If this opportunity interests you but you do not meet every listed qualification, we still encourage you to apply. Your experience and potential may be exactly what the team needs.