Engineer, Network & Applications Security Engineering

AFFIN Group; Cyberjaya; On-site; MYR 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Network & Application Security Engineer to enhance security in both application and network environments. This role involves leading the design and implementation of robust security solutions, leveraging innovative technologies to mitigate risks effectively. The ideal candidate will have a strong background in information security tools, cloud security, and network security technologies. Join a dynamic team where your contributions will directly impact the security posture of the organization, ensuring a safe and compliant environment for all operations. If you are passionate about security and technology, this opportunity is perfect for you.

Qualifications

• Proven experience with information security tools and processes.
• Strong understanding of network security and cloud security.

Responsibilities

• Lead the design and implementation of network security technologies.
• Develop automation techniques to enhance security and efficiency.
• Create comprehensive engineering documentation for security solutions.

Skills

Information Security Tools

Network Security Technologies

Cloud Security

Automation Techniques

Risk Assessment

Troubleshooting Skills

Encryption Technologies

Mobile Security

Education

Bachelor's Degree in Computer Science or related field

Tools

SIEM

Web Application Security Testing Tools

Microsoft Active Directory

Cloud Platforms (Azure, AWS)

Job description

Create your future with Affin! You too can make a difference.

Join us at AFFIN, where the open minds meet and be inspired by a shared commitment to great work. Here, you don’t just stay at the forefront of the industry – you can make a difference too.

The Network & Application Security Solution & Engineer will leverage his/her development, security and architecture experience to mitigate risk and enable security controls for both application and network environments using innovative solutions. The person is responsible for

solutioning and engineering for application and network environments related deployments, ensuring the flexibility of solution integration to cover on-premises infrastructure and Cloud without high overhead.

Accountabilities

1. Lead in the research, analysis, design, testing and implementation of complex computer network security/protection technologies for the Bank’s IT application and network environments.
2. Design, implement, maintain, and optimize robust, scalable, highly automated, and secure technical solutions in support of the Bank’s IT application and network environments.
3. Create scripts, employ tools, develop automation techniques, and pursue ideas to increase the manageability, efficiency, compliance, capability, capacity, and security of devices.
4. Create comprehensive engineering documentation including functional requirements, design proposals, network diagrams, workflow diagrams, application communications diagrams, configuration documents, support documentation, training materials, and project documents.
5. Ensure that security is embedded in how it is built from design and development to testing to how it is being run in the cloud, and to strategically guard against existing or emerging threats.
6. Develop automation and supporting infrastructure to enable significantly increased agility and consumption of cloud resources, including creating and maintaining build scripts, templates, and other artifacts for the security stack.
7. Serve as an escalation point for troubleshooting the most complex and challenging security-related challenges.
8. Assess business processes, technology, and information systems at logical, system, and component levels to understand the risk posture, apply critical thinking, determine the security models and co-design the system with enterprise architecture.

Job Requirements

1. Proven track record of effectively supporting commonly-used information security tools and processes (e.g., patch management, SIEM, UBA, Web Application Security testing, SSO, Email Security Gateways, malware management, web filtering, firewalls, proxies, APT analysis, IDS/IPS, DLP, HIDS/HIPS, network access control, threat and vulnerability management).
2. Understanding of and practical experience with internal certificate authorities, Microsoft DNS, Microsoft Active Directory design/architecture and security, data loss/leak prevention, and multifactor authentication.
3. Understanding of network design, encryption/PKI, mobile security, network security technologies, and vulnerability management.
4. Wireless security and mobile device management.
5. Knowledge of encryption algorithms and related technologies, secure communications, SSL, and PKI.
6. Experience with Cloud Security and networking (Azure, AWS).
7. Broad knowledge and understanding of emerging technologies, technology trends, and their applicability.
8. Ability to define effective information security standards applicable to specific environments.