Architect - Cyber Security

Axonect; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Axonect is seeking a senior cybersecurity leader to drive the Cyber Threat and Vulnerability Management program across on‑premises, cloud, and digital assets. You will coordinate assessments, testing, remediation tracking, and risk reporting to strengthen enterprise security and resilience.

You will oversee cloud and application security reviews, DevSecOps testing (SAST, DAST, secret scanning, SBOM), and incident response readiness, while guiding policy and KPI initiatives to measure security

Qualifications

• 7–10 years of cybersecurity experience focusing on vulnerability management, security monitoring, and incident response.
• Strong understanding of vulnerability management lifecycle, risk prioritisation, patching, and remediation.
• Experience with Nessus, Burp Suite, CrowdStrike, EDR, MDR, and attack surface management tools.
• Familiarity with CIS Controls, ISO 27001, BNM RMiT, and CSA CCM.
• Excellent communication and analytical skills for engaging stakeholders.
• CISM, CRISC, CEH, OSCP or equivalent certifications are advantageous.

Responsibilities

• Lead and oversee the CTVM program across infrastructure, applications, cloud, and digital assets.
• Coordinate vulnerability assessments, penetration testing, security reviews, remediation tracking, and risk reporting.
• Maintain visibility of IT assets and inventories.
• Coordinate security assessments across cloud, application, AI, and configuration reviews.
• Oversee security testing in DevSecOps pipelines (SAST, DAST, secret scanning, SBOM).
• Monitor SOC, EDR, and MDR services for timely security event handling.
• Lead incident response, root cause analysis, remediation, and lessons learned.
• Maintain cybersecurity policies, procedures, and incident response readiness.
• Establish and monitor cybersecurity KPIs, KRIs, dashboards, and reports.
• Identify security improvement opportunities and provide risk-based recommendations.
• Collaborate with technical teams to strengthen controls, compliance, and resilience.

Skills

7–10 years cybersecurity experience

Vulnerability management lifecycle

Incident coordination

Stakeholder management

Security monitoring

Analytical communication

Education

Bachelor's degree in Information Security / CS / IT

Certifications: CISM / CRISC / CEH / OSCP or equivalent

Tools

Nessus

Burp Suite

CrowdStrike

EDR

MDR

Attack surface mgmt

Job description

Key Responsibilities

• Lead and oversee the Cyber Threat and Vulnerability Management (CTVM) program across infrastructure, applications, cloud services, and digital assets
• Coordinate vulnerability assessments, penetration testing, security reviews, remediation tracking, and risk reporting
• Maintain visibility of IT assets and ensure accurate hardware and software inventories
• Coordinate security assessments, including cloud, application, AI, and configuration security reviews
• Oversee security testing activities within DevSecOps pipelines, including SAST, DAST, secret scanning, and software composition analysis
• Monitor SOC, EDR, and MDR services to ensure timely detection, escalation, investigation, and resolution of security events
• Lead cybersecurity incident response, root cause analysis, remediation, and lessons-learned activities
• Maintain cybersecurity policies, procedures, operating models, and incident response readiness
• Establish and monitor cybersecurity KPIs, KRIs, dashboards, and management reports
• Identify security improvement opportunities and provide risk-based recommendations to management
• Collaborate with technical teams and stakeholders to strengthen cybersecurity controls, compliance, and enterprise-wide resilience

Person Specifications

• Bachelor's degree in Information Security, Computer Science, IT, or a related discipline
• 7–10 years of experience in cybersecurity, particularly vulnerability management, security assessments, security monitoring, and incident response
• Strong understanding of the end-to-end vulnerability management lifecycle, including risk prioritisation, patching, and remediation
• Hands-on experience with security tools such as Nessus, Burp Suite, CrowdStrike, EDR, MDR, and attack surface management solutions
• Knowledge of application security, cloud security, threat intelligence, and adversary tactics, techniques, and procedures (TTPs)
• Familiarity with security frameworks and regulatory requirements, including CIS Controls, ISO 27001, BNM RMiT, and CSA Cloud Controls Matrix
• Strong incident coordination, risk assessment, stakeholder management, and reporting capabilities
• Excellent communication and analytical skills, with the ability to engage technical and non-technical stakeholders
• CISM, CRISC, CEH, OSCP, or equivalent cybersecurity certifications are advantageous