Senior Security Engineer – Vulnerability Management

Role Overview

What You Will Do

• Own discovery, enrichment, prioritization, remediation, validation, and executive reporting across the vulnerability lifecycle.
• Operate and optimize Qualys VMDR across AWS, GCP, Azure, Kubernetes, containers, endpoints, and office or network infrastructure.
• Apply CVSS, EPSS, CISA KEV, exploit intelligence, and asset criticality to risk prioritization.
• Define remediation SLAs and govern exceptions and risk acceptance.
• Correlate vulnerability findings with CSPM, IAM exposure, threat intelligence, SIEM, EDR, and cloud-native controls.
• Design automated workflows for intake, ticketing, assignment, tracking, and remediation validation.
• Use AI to enrich vulnerability context and support secure automated patching where appropriate.
• Bridge Global Security Operations with IT and Engineering and mentor analysts in risk-based triage and exploit analysis.

Who You Are

• You have 8-12 or more years of cybersecurity experience with deep vulnerability management specialization.
• You have expert-level experience with Qualys VMDR or an equivalent platform such as Tenable or Rapid7.
• You understand exploit intelligence, risk scoring, and vulnerability lifecycle governance.
• You have hands-on cloud security, CSPM, endpoint patching, configuration management, and SIEM or EDR correlation experience.
• You can automate with Python, Bash, APIs, and workflow tools.
• You have implemented AI-assisted prioritization or remediation workflows.
• You can build dashboards and KPIs that influence executive decisions.
• You have operated in regulated environments involving ISO 27001, GDPR, PCI-DSS, or DORA.
• You can translate technical exposure into business risk.

Operating Context

• The role includes technical authority for Vulnerability Management in Cyberjaya and collaboration with global security, IT, and engineering teams.

Company Context