Skill / Role: Vulnerability Assessment Engineer (L2) – Infra Security Engineering
Location: Kuala Lumpur, Malaysia
Level: L2
Experience: 3–8 Years
Work Location: On-site, Kuala Lumpur, Malaysia
Job Summary
We are looking for a skilled Vulnerability Assessment Engineer (L2) to join our Infrastructure Security Engineering team in Kuala Lumpur. The ideal candidate should have hands-on experience in vulnerability assessment, security scanning, vulnerability management, and remediation across servers, endpoints, network devices, and security infrastructure.
Key Responsibilities
- Perform vulnerability assessments and security scans across Windows, Unix/Linux servers, endpoints, network devices, and firewalls.
- Identify, analyse, prioritise, and report security vulnerabilities based on severity and risk.
- Use vulnerability assessment and scanning tools such as Nessus, Qualys, and Rapid7.
- Work with Splunk for security monitoring, log analysis, and investigation of security-related findings.
- Develop and maintain Python and Bash scripts to support security assessment, automation, and reporting activities.
- Coordinate with infrastructure, network, and security teams to validate findings and track remediation activities.
- Verify remediation actions and conduct follow-up scans to confirm vulnerability closure.
- Prepare vulnerability assessment reports, remediation updates, and technical documentation.
- Support continuous improvement of vulnerability management processes and infrastructure security controls.
Required Skills and Qualifications
- 3+ years of relevant experience in infrastructure security, vulnerability assessment, or vulnerability management.
- Hands-on experience with vulnerability assessment and network scanning tools such as Nessus, Qualys, or Rapid7.
- Working experience with Splunk.
- Scripting knowledge in Python and Bash.
- Good understanding of Windows, Unix/Linux operating systems.
- Knowledge of network devices, firewalls, endpoints, and infrastructure security.
- Understanding of vulnerability remediation, risk prioritisation, and security assessment reporting.
- Strong troubleshooting, analytical, documentation, and communication skills.
Suggested keywords: Vulnerability Assessment, Vulnerability Management, Nessus, Qualys, Rapid7, Splunk, Python, Bash, Linux Security, Network Security, Infrastructure Security, Penetration Testing.
Pay: RM1,700.00 - RM11,000.00 per month
Benefits:
- Additional leave
- Flexible schedule
- Health insurance
- Opportunities for promotion
- Parental leave
- Professional development
Application Question(s):
- Currently on Malaysia
- Willing to apply for 1-year extended contract through agency payroll
- Budget for the given role would be RM 11,000, mention you current, expected salary and notice period
- How many years of relevant hands-on experience do you have in Vulnerability Assessment or Vulnerability Management?
- Which vulnerability assessment tools have you used hands-on?
Work Location: In person