Vulnerability Management Specialist

AXA Group Operations; Puchong; Presencial; MYR 90.000 - 150.000; Jornada completa

Descripción de la vacante

AXA Group Operations in Malaysia is seeking a cybersecurity specialist to join the Cyber Defense Security Operations team, focusing on Vulnerability Management and Application Security. You will turn vulnerability data into actionable risk-based steps and help teams prioritize remediation.

This role blends hands-on security, data analysis and cross-functional influence within a global, technology-led organisation.

Formación

• 3+ years in vulnerability management or related cybersecurity field.
• Knowledge of SAST/DAST and patch management.
• Experience with security scanning tools (Qualys, Tenable, Burp, Checkmarx).
• Ability to communicate findings to technical and non-technical stakeholders.

Responsabilidades

• Lead vulnerability assessments across servers, network devices, web apps and supporting infra.
• Prioritize vulnerabilities by exposure, business impact, and risk appetite.
• Translate security data into practical remediation recommendations.
• Advise IT production and application teams on remediation strategies.
• Coordinate with local security and IT teams to drive resolution.
• Assess risk using established methodologies and support risk-acceptance decisions.
• Maintain visibility of remediation progress and exposure.
• Investigate issues using vulnerability scans, alerts and web app testing results.

Conocimientos

Vulnerability management

Application security

Risk analysis

Security reporting

Communication

Educación

Diploma or Bachelor's in IT/Cybersecurity

Herramientas

Qualys

Tenable

Burp Suite

Checkmarx

Descripción del empleo

Why Join Us?

Join AXA Group Operations and help strengthen cybersecurity across a global, technology-led organisation.

Three Reasons To Consider This Opportunity

• Make a visible security impact: Identify critical vulnerabilities, influence remediation priorities and help protect business-critical infrastructure and applications.


• Work at global scale: Collaborate with security, IT production and application teams across an international organisation operating in 17 countries.


• Grow as a cybersecurity expert: Expand your expertise across vulnerability management, application security, risk analysis and security advisory.

About The Role

You will join the Cyber Defense Security Operations team, focusing on Vulnerability Management and Application Security. As a trusted technical specialist, you will turn vulnerability data into clear, risk-based actions. You will help teams understand their exposure, prioritise the issues that matter most and implement effective remediation or compensating controls. This role offers the opportunity to combine hands‑on security expertise, data analysis and cross-functional influence in an organisation where technology and innovation are central to transformation.

What You’ll Do

• Lead vulnerability assessments across servers, network devices, web applications and supporting infrastructure.


• Identify and prioritise critical vulnerabilities based on technical exposure, business impact and risk appetite.


• Translate structured and unstructured security data into practical remediation recommendations.


• Advise IT production and application teams on effective, sustainable remediation strategies.


• Coordinate with local security and IT teams to drive vulnerabilities through to resolution.


• Recommend compensating controls when immediate remediation is not possible.


• Assess risk using established security methodologies and support appropriate risk-acceptance decisions.


• Maintain clear visibility of remediation progress, outstanding exposure and vulnerability status.


• Investigate security issues using vulnerability scans, alerts and web application security-testing results.

What You’ll Bring

• At least three years of professional experience in vulnerability management, application security or a closely related cybersecurity discipline.


• Strong knowledge of vulnerability assessment and infrastructure security reviews.


• Practical understanding of SAST, DAST, patch management, network security, server administration and system hardening.


• Experience with vulnerability and application-security technologies such as Qualys, Tenable, Burp Suite or Checkmarx.


• The ability to analyse complex security information and convert it into focused, actionable recommendations.


• Confidence working with technical and non-technical stakeholders in an international environment.


• Strong written communication, presentation and problem-solving skills.


• A diploma, bachelor’s degree or equivalent learning and experience in IT, computer science, cybersecurity or a related field.

What Will Make You Stand Out

• Experience applying security controls to operational technology services.


• Cybersecurity certifications such as CISSP, GWEB or CEH.


• Experience creating concise, decision-ready reporting with Microsoft Office, Power BI or similar tools.


• A methodical approach to ownership and follow-through, combined with a drive to improve efficiency.


• The ability to balance technical severity with business context when recommending priorities.

What We Offer

• The opportunity to influence vulnerability reduction across a large, international organisation.


• Exposure to infrastructure security, application security, Cyberdefense and risk management.


• Collaboration with skilled teams across security, technology, data and business operations.


• A role at the heart of AXA’s transformation into a sustainable, technology-led company.


• An environment that values innovation, courage, integrity, collaboration and customer focus.


• Meaningful opportunities to deepen your technical expertise and broaden your influence as a cybersecurity professional.

Diversity & Inclusion Statement

AXA is committed to equal opportunity and to creating a workplace where everyone is treated with dignity and respect. We welcome different backgrounds, experiences and perspectives, including applications from women, LGBTQ+ people, people with disabilities and people of all origins.