Cybersecurity Engineer

Mission Consultancy Services; Kuala Lumpur; On-site; MYR 90,000 - 120,000; Full time

Job summary

Mission Consultancy Services in Malaysia is seeking a Cybersecurity Engineer to design, implement, and maintain security measures protecting our systems, networks, and data from cyber threats. You will identify vulnerabilities, respond to incidents, and strengthen our security posture.

You will collaborate with IT and DevOps to embed security into CI/CD pipelines and cloud environments, while staying current with threats and regulatory requirements such as PDPA.

Qualifications

• Bachelor's degree in Computer Science, Information Security, IT or related field (or equivalent practical experience).
• 3–6 years hands-on experience in cybersecurity engineering, network security or related field.
• Solid understanding of firewalls, VPNs, IDS/IPS, and network segmentation.
• Experience with SIEM tools (Splunk, QRadar, MS Sentinel) and log analysis.
• Familiarity with vulnerability scanning and pentesting tools (Nessus, Qualys, Burp Suite, Metasploit).
• Experience securing cloud environments (AWS, Azure, GCP).
• Knowledge of scripting/automation (Python, Bash, PowerShell).
• Understanding of ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK; IAM and MFA familiarity.

Responsibilities

• Design, implement, and maintain security infrastructure (firewalls, IDS/IPS, SIEM, endpoint protection, VPNs).
• Conduct vulnerability assessments, penetration testing, and security audits across networks, apps, systems.
• Monitor alerts and logs to detect and respond to security incidents promptly.
• Develop incident response plans, playbooks, and disaster recovery procedures.
• Collaborate with IT/DevOps to embed security in CI/CD and cloud architectures.
• Stay updated on emerging threats and regulatory requirements (PDPA Malaysia).
• Maintain documentation of security policies and configurations.
• Participate in on-call rotation for incident response.

Skills

Analytical thinking

Problem solving

Communication skills

Team collaboration

Attention to detail

Independent work

Education

Bachelor's degree in Computer Science / Information Security / IT

Tools

Splunk

QRadar

Microsoft Sentinel

Nessus

Qualys

Burp Suite

Metasploit

Python

Job description

JOB SUMMARY

We are looking for a skilled and proactive Cybersecurity Engineer to join our IT/Security team. In this role, you will be responsible for designing, implementing, and maintaining security measures that protect our organization's systems, networks, and data from cyber threats. You will play a key role in identifying vulnerabilities, responding to incidents, and strengthening our overall security posture.

JOB DESCRIPTION

• Design, implement, and maintain security infrastructure including firewalls, IDS/IPS, SIEM, endpoint protection, and VPN solutions.


• Conduct regular vulnerability assessments, penetration testing, and security audits across networks, applications, and systems.


• Monitor security alerts and logs to detect, investigate, and respond to potential security incidents in a timely manner.


• Develop and maintain incident response plans, playbooks, and disaster recovery procedures.


• Perform root cause analysis for security incidents and recommend corrective/preventive actions.


• Implement and manage identity and access management (IAM) controls, including least-privilege and role-based access.


• Collaborate with IT and DevOps teams to embed security best practices into system architecture, CI/CD pipelines, and cloud environments.


• Stay current with emerging threats, vulnerabilities, and security technologies, and recommend improvements accordingly.


• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, PCI-DSS, NIST, PDPA).


• Conduct security awareness training and support internal teams with security best practices.


• Maintain documentation for security policies, procedures, and configurations.


• Participate in on‑call rotation for critical security incident response, as needed.

JOB REQUIREMENTS

• 3–6 years of hands‑on experience in cybersecurity engineering, network security, or a related field.


• Bachelor's degree in Computer Science, Information Security, IT, or a related field (or equivalent practical experience).


• Solid understanding of network security concepts (firewalls, VPNs, IDS/IPS, network segmentation).


• Experience with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel) and log analysis.


• Familiarity with vulnerability scanning and penetration testing tools (e.g., Nessus, Qualys, Burp Suite, Metasploit).


• Experience securing cloud environments (AWS, Azure, or GCP).


• Knowledge of scripting/automation languages (Python, Bash, PowerShell) for security tooling.


• Understanding of security frameworks and standards (ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK).


• Experience with endpoint detection and response (EDR) and antivirus/anti‑malware solutions.


• Familiarity with identity and access management (IAM), Active Directory, and multi‑factor authentication (MFA).


• Relevant certifications such as CEH, CompTIA Security+, CISSP, OSCP, or GIAC certifications are an advantage.


• Experience with DevSecOps practices and integrating security into CI/CD pipelines.


• Exposure to regulatory compliance requirements in Malaysia (e.g., PDPA) or the region.


• Prior experience in incident response or digital forensics.


• Strong analytical and problem‑solving abilities.


• Excellent communication skills, with the ability to explain technical risks to non‑technical stakeholders.


• Ability to work independently and collaboratively in a fast‑paced environment.


• High attention to detail and a proactive, security‑first mindset.