Vulnerability & Patching Engineer

About the role

RiDiK, a subsidiary of CLPS (Nasdaq: CLPS), is seeking a skilled Vulnerability & Patching Engineer to join our Networks & Systems Administration team. This is a contract position based in Kuala Lumpur. In this role, you will be responsible for identifying, assessing, and remediating vulnerabilities across our IT infrastructure whilst ensuring systems remain secure and up-to-date through effective patch management strategies. This position is critical to maintaining the security posture of our organisation and protecting our digital assets from evolving cyber threats.

Key responsibilities

• Conduct regular vulnerability assessments and scans across network infrastructure, servers, and applications using industry-standard tools and methodologies
• Develop, implement and maintain comprehensive patch management policies and procedures to ensure timely deployment of security updates
• Prioritise and classify vulnerabilities based on severity, exploitability and business impact to establish remediation timelines
• Coordinate with system administrators and application teams to plan and execute patch deployments with minimal business disruption
• Document all vulnerability findings, remediation actions and patch deployment activities in accordance with compliance and audit requirements
• Monitor security bulletins, advisories and threat intelligence feeds to stay informed of emerging vulnerabilities affecting our infrastructure
• Perform testing and validation of patches in controlled environments before production deployment
• Liaise with vendors and third-party service providers regarding security issues and remediation options
• Generate detailed reports and dashboards to communicate vulnerability trends, remediation status and compliance metrics to management and stakeholders
• Support incident response activities by providing technical analysis and remediation guidance for security events

What we're looking for

• 3-5 years of professional experience in vulnerability assessment, patch management or systems administration within a technology-focused environment
• Strong technical knowledge of operating systems including Windows Server, Linux and enterprise networking environments
• Hands-on experience with vulnerability scanning tools such as Nessus, Qualys, OpenVAS or similar platforms
• Proficiency with patch management solutions and deployment tools
• Understanding of the vulnerability lifecycle and common vulnerability scoring systems (CVSS)
• Knowledge of security frameworks and compliance standards such as ISO 27001, CIS Controls or NIST guidelines
• Experience with configuration management and Infrastructure-as-Code principles is advantageous
• Excellent analytical and problem-solving skills with the ability to prioritise multiple concurrent tasks
• Strong communication abilities with capacity to document technical findings clearly for both technical and non-technical audiences
• Relevant certifications such as CompTIA Security+, CEH or equivalent qualifications are preferred

What we offer

At RiDiK, we are committed to supporting our team members' professional growth and wellbeing. We provide competitive contract terms, access to professional development opportunities and training to stay current with industry advancements. Our collaborative working environment fosters innovation and knowledge sharing among team members. We offer flexible working arrangements where applicable and promote a healthy work-life balance. Our organisation values diversity and inclusion, and we welcome applications from all qualified candidates. Should you require any adjustments or support during the recruitment process, please do not hesitate to contact us.

About us

RiDiK is a subsidiary of CLPS Incorporation (listed on Nasdaq: CLPS), a leading financial technology and business services company. Our organisation is dedicated to delivering cutting-edge technology solutions and comprehensive IT services to clients globally. We are committed to maintaining the highest standards of security, compliance and operational excellence. With a focus on innovation, customer satisfaction and employee development, RiDiK continues to expand its capabilities and market presence in the rapidly evolving technology landscape. We foster a culture of continuous improvement and encourage our team to contribute ideas and solutions that drive business success.

If you are a detail-oriented professional with a passion for cybersecurity and systems administration, we would like to hear from you. Apply now to join our team and make a meaningful impact on our organisation's security infrastructure.