Information Security Engineer

Tóm tắt công việc
About the Role:
We are building a Patching Center of Excellence (COE) to standardize patch governance, improve risk reduction, and enhance operational resilience. This role will analyse vendor patches and vulnerabilities, validate patch packages, coordinate testing windows, run post-patching security scans, and provide actionable risk and compliance reporting. The role is ideal for a junior manager with strong technical skills and a passion for operational security.
Key Responsibilities
Patch Intelligence & Analysis
Track vendor advisories (Microsoft, Red Hat, Apple, Adobe, Cisco, VMware, browser vendors).
Analyze CVEs, CVSS/EPSS scores, exploit maturity, KEV catalog entries, and asset exposure.
Recommend prioritization (e.g., weaponized, internet-facing, crown jewels, high business impact).
Patch Validation & Testing
Review patch metadata, supersedence, prerequisites, and rollback strategy.
Coordinate patch validation in UAT/Pilot rings; verify functional and security outcomes.
Document test cases, exceptions, application compatibility notes, and sign-off criteria.
Orchestration Support
Ensure maintenance window discipline, change records, and communications are tracked.
Post-Patch Security Assurance
Run/validate post-patching scans (e.g., Qualys/Tenable/Rapid7; Defender for Endpoint).
Investigate residual vulnerabilities, misconfigurations, failed installs, and drifts.
Continuous Improvement
Contribute to SOPs, standards, and ring & rollback methodologies.
Attractive salary and benefits
Hybrid working mode
Full salary in probation & 13th month salary
Social insurance on full salary from probation
Extensive leave up to 18 days per year
Annual health check