Cybersecurity Engineer

Mission Consultancy Services Sdn. Bhd.; Kuala Lumpur; On-site; MYR 90,000 - 180,000; Full time

Job summary

Mission Consultancy Services Sdn. Bhd. is seeking a skilled Cybersecurity Engineer to join its IT/Security team in Kuala Lumpur. The role focuses on designing, implementing, and maintaining security measures to protect systems, networks, and data.

You will conduct vulnerability assessments, respond to incidents, and collaborate with IT/DevOps to embed security into CI/CD and cloud environments, while ensuring compliance with ISO 27001, NIST, and PDPA.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/InfoSec.
• 3–6 years hands-on cybersecurity engineering experience.
• Solid knowledge of network security concepts (firewalls, VPNs, IDS/IPS, segmentation).
• Experience with SIEM and log analysis.
• Familiarity with vulnerability scanning and pentesting tools.
• Experience securing cloud environments (AWS, Azure, GCP).
• Knowledge of security frameworks and standards (ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK).
• DevSecOps and CI/CD security experience.
• PDPA regulatory exposure in Malaysia.

Responsibilities

• Design, implement, and maintain security infrastructure (firewalls, IDS/IPS, SIEM, EDR, VPN).
• Conduct vulnerability assessments, penetration testing, and security audits.
• Monitor security alerts and logs; respond to incidents.
• Develop and maintain incident response plans and disaster recovery procedures.
• Perform root cause analysis and recommend corrective actions.
• Implement IAM controls including least-privilege and MFA.
• Collaborate with IT/DevOps to embed security in CI/CD and cloud environments.
• Stay current with threats and technologies; recommend improvements.
• Ensure compliance with ISO 27001, NIST, PCI-DSS, PDPA.

Skills

Security engineering

Network security

SIEM

Vulnerability testing

Penetration testing

Incident response

IAM

Cloud security

Scripting

CI/CD security

Education

Bachelor's degree in CS/InfoSec/IT or related field

Tools

Splunk

QRadar

Microsoft Sentinel

Nessus

Qualys

Burp Suite

Metasploit

Job description

Job Summary

We are looking for a skilled and proactive Cybersecurity Engineer to join our IT/Security team. In this role, you will be responsible for designing, implementing, and maintaining security measures that protect our organization's systems, networks, and data from cyber threats. You will play a key role in identifying vulnerabilities, responding to incidents, and strengthening our overall security posture.

Job Description

• Design, implement, and maintain security infrastructure including firewalls, IDS/IPS, SIEM, endpoint protection, and VPN solutions.
• Conduct regular vulnerability assessments, penetration testing, and security audits across networks, applications, and systems.
• Monitor security alerts and logs to detect, investigate, and respond to potential security incidents in a timely manner.
• Develop and maintain incident response plans, playbooks, and disaster recovery procedures.
• Perform root cause analysis for security incidents and recommend corrective/preventive actions.
• Implement and manage identity and access management (IAM) controls, including least-privilege and role-based access.
• Collaborate with IT and DevOps teams to embed security best practices into system architecture, CI/CD pipelines, and cloud environments.
• Stay current with emerging threats, vulnerabilities, and security technologies, and recommend improvements accordingly.
• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, PCI-DSS, NIST, PDPA).
• Conduct security awareness training and support internal teams with security best practices.
• Maintain documentation for security policies, procedures, and configurations.
• Participate in on-call rotation for critical security incident response, as needed.

Job Requirements

• 3–6 years of hands‑on experience in cybersecurity engineering, network security, or a related field.
• Bachelor's degree in Computer Science, Information Security, IT, or a related field (or equivalent practical experience).
• Solid understanding of network security concepts (firewalls, VPNs, IDS/IPS, network segmentation).
• Experience with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel) and log analysis.
• Familiarity with vulnerability scanning and penetration testing tools (e.g., Nessus, Qualys, Burp Suite, Metasploit).
• Experience securing cloud environments (AWS, Azure, or GCP).
• Knowledge of scripting/automation languages (Python, Bash, PowerShell) for security tooling.
• Understanding of security frameworks and standards (ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK).
• Experience with endpoint detection and response (EDR) and antivirus/anti‑malware solutions.
• Familiarity with identity and access management (IAM), Active Directory, and multi‑factor authentication (MFA).
• Relevant certifications such as CEH, CompTIA Security+, CISSP, OSCP, or GIAC certifications are an advantage.
• Experience with DevSecOps practices and integrating security into CI/CD pipelines.
• Exposure to regulatory compliance requirements in Malaysia (e.g., PDPA) or the region.
• Prior experience in incident response or digital forensics.
• Strong analytical and problem‑solving abilities.
• Excellent communication skills, with the ability to explain technical risks to non‑technical stakeholders.
• Ability to work independently and collaboratively in a fast‑paced environment.
• High attention to detail and a proactive, security‑first mindset.