{"id":4095117,"url":"https://alion.io/job/starhub-lead-vm-app-security-engineer-2","title":"Lead - VM & App Security Engineer","company":{"id":49913,"name":"StarHub","domain":"starhub.com","url":"https://alion.io/company/starhub","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Petaling Jaya, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"Fortify","optional":false},{"name":"Jira","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"ServiceNow","optional":false},{"name":"SonarQube","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-11-04T15:00:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-11T20:57:42Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Vulnerability Management Specialist\nWe are seeking a Vulnerability Management Specialist to lead the identification, assessment, prioritization, and remediation tracking of security vulnerabilities across our technology environment. This role will work closely with application, infrastructure, cloud, and security teams to reduce cyber risk through a structured, risk-based vulnerability management programme.\nKey Responsibilities\nOperate and maintain vulnerability scanning platforms, preferably including Tenable/Nessus and Qualys.\nConduct authenticated and unauthenticated vulnerability scans across servers, endpoints, network devices, cloud workloads, and applications.\nAnalyse scan results, validate findings, eliminate false positives, and assess business and technical risk.\nManage the end-to-end vulnerability lifecycle: discovery, triage, prioritisation, assignment, remediation tracking, validation, exception management, and closure.\nApply risk-based prioritisation using CVSS, exploitability, asset criticality, internet exposure, business impact, and known active threats.\nPartner with infrastructure, application, cloud, and DevOps teams to define practical remediation plans and meet agreed remediation timelines.\nProduce regular vulnerability reports, dashboards, metrics, and management updates, including SLA compliance, overdue findings, vulnerability ageing, and risk trends.\nMaintain vulnerability management policies, procedures, asset coverage, scan schedules, and evidence for audit and compliance requirements.\nSupport remediation of application and software-supply-chain vulnerabilities through tools and platforms such as JFrog, Bitbucket, SonarQube, Fortify, and CI/CD pipelines.\nIdentify gaps in asset inventory, scanning coverage, and remediation ownership, and recommend process or automation improvements.\nStay current on emerging vulnerabilities, exploit activity, vendor advisories, and threat intelligence relevant to the organisation.\nRequired Qualifications\nDegree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.\nExperience in vulnerability management, security operations, infrastructure security, application security, or a related cybersecurity function.\nHands-on experience with vulnerability scanning tools, especially Tenable/Nessus and/or Qualys.\nStrong understanding of vulnerability management processes, including scanning, validation, CVSS, risk assessment, remediation verification, exception handling, and reporting.\nFamiliarity with common operating systems, networks, cloud environments, and enterprise infrastructure.\nUnderstanding of common application vulnerabilities and the OWASP Top 10.\nExperience working with ticketing and workflow tools such as Jira, ServiceNow, or equivalent.\nAbility to analyse technical findings and explain risk and remediation actions clearly to technical and non-technical stakeholders.\nStrong attention to detail, organisation, and follow-through in managing findings through closure.\nPreferred Qualifications\nExperience with application-security or DevSecOps platforms such as JFrog, Bitbucket, SonarQube, Fortify, SAST, DAST, SCA, and container-security tools.\nFamiliarity with cloud-security and cloud-native vulnerability management across AWS, Azure, or Google Cloud.\nKnowledge of threat intelligence sources, CISA Known Exploited Vulnerabilities, and exploitability assessment.\nExperience developing vulnerability dashboards, metrics, or automated reporting.\nSecurity certifications such as Security+, CEH, CISSP, CISM, CSSLP, or relevant vendor certifications.","description_format":"text","description_chars":3602,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Mobile Networks","Broadband"],"lifecycle":[{"event":"open","at":"2026-11-11T20:57:42Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":7,"expected_fill_days":39,"reasons":["conf:2","win:early"],"computed_at":"2026-11-11T23:31:13Z"},"pay":null,"html_url":"https://alion.io/job/starhub-lead-vm-app-security-engineer-2","json_url":"https://alion.io/job/starhub-lead-vm-app-security-engineer-2.json","meta":{"generated_at":"2026-11-11T23:31:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":46810,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49913},"rest":"https://alion.io/mcp/rest/get_company?id=49913"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstarhub-lead-vm-app-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstarhub-lead-vm-app-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstarhub-lead-vm-app-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/starhub-lead-vm-app-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstarhub-lead-vm-app-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4095117}},{"tool":"search_jobs","arguments":{"company":"starhub.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4095117},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}