Entry/Associate - Security Engineer

Ancile Solutions Sdn Bhd; Bayan Lepas; On-site; MYR 50,000 - 80,000; Full time

Job summary

Ancile Solutions Sdn Bhd in Malaysia seeks a Junior/Associate Cybersecurity Engineer to protect client IT environments by deploying NGFWs, enforcing NAC, and monitoring SIEM/XDR alerts. You will work with senior engineers, gaining hands-on exposure across security domains and ownership of continuous learning.

You will contribute to incident response, vulnerability assessments, and security governance while collaborating with on-site client teams and maintaining clear communication throughout

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field, or equivalent experience.
• 0 to 3 years of working experience in IT support, network administration, or information security. Fresh graduates encouraged to apply.

Responsibilities

• Act as the technical escalation point for network support cases during investigations.
• Assist in design, deployment, and configuration of Next-Generation Firewalls across client environments.
• Manage Enterprise NAC platforms using AAA and 802.1X to enforce secure network admission.
• Conduct risk and vulnerability assessments and produce actionable VA reports.
• Assist ISMS policy, SOPs, asset inventories, and risk registers documentation and audits.

Skills

Networking Fundamentals

Analytical Troubleshooting

Client-Facing Communication

Field Mobility

On-Call Readiness

Education

Bachelor's degree in Cybersecurity/Computer Science/IT

Tools

Nessus

Nmap

NGFW knowledge

Job description

As a Junior / Associate Cybersecurity Engineer, you will play an essential role in protecting our clients' IT and network environments against evolving cyber threats. Working alongside senior engineers, you will bridge the gap between network infrastructure and security—deploying Next-Generation Firewalls, enforcing network access controls, monitoring SIEM/XDR alerts, conducting vulnerability assessments, and supporting incident response.

This role is built for someone with a strong passion for cybersecurity and a proactive, self-driven mindset. You will be given real hands‑on exposure across multiple security domains, supported by mentorship from senior engineers, while taking personal ownership of your continuous learning.

Key Responsibilities

As a member of our technical delivery team, you will help translate security strategies into practical, day‑to‑day protection for our clients. Your responsibilities will include, but are not limited to:

1. Network Security Incident Response

• Act as the technical escalation point for the ticketing Person-in-Charge (PIC) when network support cases exhibit suspicious or malicious characteristics.
• Document comprehensive incident timelines, maintain clear and timely communication with clients during active investigations, and assist senior engineers in executing containment, eradication, and remediation steps.
• Contribute to post‑incident reviews and root‑cause analysis (RCA) documentation to help prevent recurring security issues.

2. Firewall Deployment & Strengthening

• Assist senior security engineers in the design, deployment, and configuration of Next-Generation Firewalls (NGFW) across diverse client environments.
• Process and evaluate client firewall policy change requests, ensuring all new rules strictly adhere to the principle of least privilege and corporate security standards.
• Conduct regular firewall rule‑base audits to identify, remediate, or decommission shadowed, redundant, or overly permissive rules.
• Support, and maintain enterprise Network Access Control (NAC) platforms using AAA frameworks (RADIUS/TACACS+) and 802.1X protocols to enforce secure wired and wireless network admission.
• Troubleshoot endpoint authentication issues, manage device profiling policies, and ensure unauthorized or non‑compliant devices are properly quarantined or restricted.

4. Risk and Vulnerability Assessment

• Execute assigned risk and vulnerability assessments across client networks and systems using established security scanning and assessment tools.
• Analyse scan findings to compile clear, actionable Vulnerability Assessment (VA) reports that prioritize risks and outline practical remediation steps for clients.
• Execute or assist client IT teams with technical remediation actions—such as system patching, configuration hardening, or applying virtual patches—when required.

5. Governance, Compliance, and Documentation

• Assist the owner of Information Security Management System (ISMS) documentation, ensuring that security policies, Standard Operating Procedures (SOPs), asset inventories, and risk registers are version‑controlled and kept up to date.
• Coordinate and collect technical audit evidence (such as firewall review logs, incident reports, and vulnerability scan records) to demonstrate continuous compliance during internal and external audits.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field, or equivalent experience.
• 0 to 3 years of working experience in IT support, network administration, or information security. Fresh graduates with final‑year security/networking projects or relevant internship experience are strongly encouraged to apply.

Core Technical Requirements

• Networking Fundamentals: Solid grasp of core networking concepts, including the OSI model, TCP/IP, subnetting, VLANs, routing, and switching.
• Firewall & Perimeter Security: Basic understanding of firewall rules, NAT, VPNs (IPsec/SSL), and the principle of least privilege.
• Identity & Access Control: Familiarity with authentication concepts such as AAA (RADIUS/TACACS+), 802.1X port‑based authentication, Active Directory/LDAP, and Multi‑Factor Authentication (MFA).
• Vulnerability Assessment Concepts: Awareness of common security vulnerabilities, CVE/CVSS scoring, and how vulnerability scanning tools (e.g., Nessus, Nmap) identify network and host weaknesses.
• Threat Monitoring & Detection (SIEM/XDR): Foundational understanding of centralized log management, Security Information and Event Management (SIEM), and Extended Detection and Response (XDR) concepts—including how security telemetry from endpoints, networks, and firewalls is correlated to detect anomalies and investigate alerts.
• Security Governance & Compliance: Basic awareness of the CIA Triad (Confidentiality, Integrity, Availability) and information security frameworks.

4. Soft Skills & Operational Requirements

• Analytical Troubleshooting: Methodical mindset when isolating network anomalies, reading system/firewall logs, and assisting in incident escalation.
• Client‑Facing Professionalism: Good interpersonal and communication skills to interact clearly with client IT teams during on‑site deployments and active support escalations.
• Field Mobility: Willingness to travel to client premises for site surveys, hardware deployments, and troubleshooting as required (possessing a valid driving license and own transport is preferred).
• On‑call Standby Rotation: Willingness to participate in a scheduled on‑call/standby rotation to support urgent network security incident escalations and critical client issues outside of standard business hours.
• Maintenance Window Flexibility: Ability to occasionally work during scheduled after‑hours or weekend maintenance windows when executing high‑impact tasks, such as firewall cutovers, NAC policy enforcement, or critical security patching.

Preferred Certifications (Added Advantage)

• Entry‑Level Security & Networking: ISC2 Certified in Cybersecurity (CC), CompTIA Security+, CompTIA Network+, or Cisco CCNA.
• Vendor Exposure: Hands‑on lab or internship exposure to Next‑Generation Firewalls (such as Palo Alto Networks, Fortinet FortiGate, Sophos, or Cisco Firepower) is a strong plus.

Overview of company

Headquartered in Penang, we work alongside you to plan and structure your IT system according to your needs and requirements.

Ancile Solutions is a prominent IT system integrator company in Malaysia that was established with a desire to help businesses transform and modernise using innovative software solutions. Since 2009, our focus has been on Network and Systems technology and incorporating it into business operations seamlessly and effectively. We strive to drive companies to success with our smart solutions.

We do not believe that one size fits all.

Overview of company

Headquartered in Penang, we work alongside you to plan and structure your IT system according to your needs and requirements.

Ancile Solutions is a prominent IT system integrator company in Malaysia that was established with a desire to help businesses transform and modernise using innovative software solutions. Since 2009, our focus has been on Network and Systems technology and incorporating it into business operations seamlessly and effectively. We strive to drive companies to success with our smart solutions.

We do not believe that one size fits all.