Cyber Threat & Security Data Engineer

SICPA; Cyberjaya; In loco; MYR 90.000 - 150.000; Tempo pieno

Descrizione del lavoro

SICPA in Cyberjaya is seeking a Cyber Threat & Security Data Engineer for a combined Operations and Engineering role within the SOC. You will monitor environments, triage alerts, and execute incident response while also designing data pipelines and maintaining security telemetry for threat detection and investigations.

Responsibilities include on-call duties, onboarding new data sources, and collaborating with architects to enable robust detection; strong English communication and a background

Competenze

• Experience in SOC/CERT/CSIRT environments (min 3 years).
• Bachelor degree in Cyber security or equivalent.
• Experience with data ingestion, log management, ETL/ELT concepts or security data pipelines.
• Understanding of data quality, normalization and schema management.
• Knowledge of APIs, JSON, data parsing and automation scripting (Python/PowerShell).
• Interest in AI-enabled Agentic SOC models.
• Hands-on experience with security technologies (firewalls, IDS/IPS, SIEM, anti-malware, web filtering, vulnerability scanning, EDR).
• Experience investigating and responding to cyber attacks.
• Strong IT grounding across networking, OS, cloud, SaaS, data centers.
• Good written and spoken English; other languages are a plus.

Mansioni

• Monitor environment for abnormal behaviour and security alerts.
• Triage alerts and launch incident response within SICPA network.
• Use forensic tools to understand incident scope.
• Perform threat hunting across infrastructure.
• Conduct on-call duties as scheduled; no night ops.
• Design and maintain security data pipelines and data lake for detection and investigations.
• Onboard new data sources; ensure data quality and normalization.
• Collaborate with security architects and engineers to support detection use cases.
• Help develop SOC policies, processes and procedures.

Conoscenze

SOC operations

Threat hunting

Incident response

Data analysis

Communications

Formazione

Bachelor degree in Cyber security

Equivalent

Strumenti

Firewalls

IDS/IPS

SIEM

Anti-malware

Web filtering

Vulnerability scanning

Endpoint detection and response tools

Descrizione del lavoro

Job description:

ROLE:

The SOC at SICPA is built of the most advanced and recent cyber technologies. Without levels distinction (Tier-1/2/3), the Cyber Threat & Security Data Engineer has an exclusive role and will perform both Operations duties and Engineering activities.

Operational activities:

• Monitor the firm’s environment for abnormal behaviour and potential security breaches by triaging security alerts generated by cyber detection tools.
• Launch response measures to security incidents within the SICPA network, infrastructure, identity management and applications.
• Utilize industry standard network and host forensic tools in order to fully understand the scope of an incident.
• Perform threat hunting by searching our existing infrastructure for signs of malware and malicious events not detected by our existing security controls.
• Perform on call duties on a scheduled basis.
• Operations is performed during business hours (no night operations).

Engineering activities :

• Design, implement and maintain security data pipelines, security data lake and data architecture used for threat detection, investigations, reporting and Agentic SOC capabilities.
• Ensure the quality, normalization, availability and reliability of security telemetry by continuously monitoring data health, ingestion performance and pipeline operations.
• Onboard new security and IT data sources into the SOC ecosystem, including log collection, parsing, enrichment and data validation.
• Define, develop and maintain parsers, schemas and mappings required to maximize data usability across detection and investigation platforms.
• Work closely with security architects, platform engineers and threat analysts to ensure security data supports current and future detection use cases.
• Develop a strong working relationship with key business and technical partners to ensure cross-organization, co-operation and business support.
• Help to develop, implement, and maintain SOC policies, processes and procedures.

PROFILE

• Experience in a similar environment (SOC, CERT, CSIRT) including Monitoring, Hunting and Incident response including Investigation and Forensic (minimum 3 years)
• Bachelor degree in Cyber security or equivalent.
• Experience with data ingestion, log management, ETL/ELT concepts or security data pipelines.
• Understanding of data quality, data normalization and schema management principles.
• Knowledge of APIs, JSON, data parsing and automation scripting (Python, PowerShell or similar).
• Interest in AI-enabled and Agentic SOC operating models.
• Practical experience with security technologies such as firewalls, IDS/IPS, SIEM, anti-malware, web filtering, vulnerability scanning and endpoint detection and response tools.
• Hands-on experience in investigating and responding to common types of cyber attacks.
• Strong understanding of enterprise IT, including networking infrastructure, operating systems, cloud and SaaS services, systems administration, data centers and software applications.
• Good communications skills to effectively summarize and present findings.
• Very good knowledge of English both written and spoken, other languages are an asset. Ability to engender positive and reliable work attitude when confronting with high pressure business situations.

JOIN US!

We offer an exciting and challenging role, with great potential for personal development and a truly global impact. Help us contribute to a more secure world and enable trust in the digital society!