Executive, Managed Security Services

Malaysian Communications and Multimedia Commission; Cyberjaya; On-site; MYR 60,000 - 110,000; Full time

Job summary

Malaysian Communications and Multimedia Commission is seeking an experienced Security Infrastructure Administrator to oversee Tier 1/2 firewalls, WAF, VPN, and related security platforms in Cyberjaya. You will monitor, maintain and coordinate security configurations, respond to incidents, and ensure regulatory and ISMS readiness.

The role covers change management, asset lifecycle, and collaboration with vendors and system owners to sustain secure, resilient operations across internal and

Qualifications

• Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, Information Security, or related discipline (CGPA ≥3.00).
• 1–5 years in network security, security infrastructure operations, firewall administration, SOC support or cybersecurity operations.
• Professional certification or training in security platforms (Fortinet, Palo Alto, Check Point, Cisco, F5) or related areas.

Responsibilities

• Administer and maintain Tier 1 and Tier 2 Firewalls, WAF, VPN, Reverse Proxy, Load Balancer, WAN Switches and related security infrastructure.
• Implement approved firewall rules, NAT, ACL, VPN settings, WAF policies and access controls per change procedures.
• Monitor North-South and East-West traffic, security events and indicators of compromise across platforms.
• Perform routine health checks on appliance availability, CPU, memory, disk usage, interface status, HA status and logs.
• Support investigation, initial triage, evidence collection, log extraction, blocking actions and escalation during incidents.
• Monitor external exposure, validate discovered assets, coordinate remediation and tracking.
• Support firmware upgrades, patching, backups, certificate renewals, and lifecycle maintenance.
• Prepare Change Requests with impact analysis, rollback plans and post-change verification.

Skills

Security architecture

Firewall architecture

Vulnerability management

Incident response

Change management

Documentation and runbooks

Log analysis

Education

Bachelor’s Degree in IT/CS/Cybersecurity/Networking

Tools

Fortinet

Palo Alto

Check Point

Cisco

F5

Job description

Job Summary

To support the secure, reliable and resilient operation of MCMC’s security infrastructure by administering, monitoring, maintaining and coordinating security platforms that enable network protection, traffic control, cyber threat detection, incident response support and operational continuity across MCMC’s internal and external-facing environments. The role contributes to MCMC’s cybersecurity governance and operational assurance by supporting the day-to-day operation of security infrastructure, including Tier 1 and Tier 2 Firewalls, Web Application Firewall, VPN, Reverse Proxy, Load Balancer, WAN security components, Attack Surface Management and related monitoring platforms. The position is also responsible to support security configuration, change implementation, preventive maintenance, troubleshooting, documentation, vendor coordination and compliance readiness.

Job Responsibilities

Security Infrastructure Administration

• Administer and maintain Tier 1 and Tier 2 Firewalls, WAF, VPN, Reverse Proxy, Load Balancer, WAN Switches, ASM and related security infrastructure.

Security Policy and Configuration Management

• Implement approved firewall rules, NAT, ACL, VPN settings, WAF policies, routing-related security controls and access restrictions in accordance with approved change procedures.

Network Security Monitoring

• Monitor North-South and East-West traffic, security events, abnormal connections and indicators of potential compromise across relevant platforms.

Infrastructure Health and Availability Monitoring

• Perform routine health checks on appliance availability, CPU, memory, disk utilisation, interface status, HA status, licence status and system logs.

Incident Response Support

• Support investigation, initial triage, evidence collection, log extraction, blocking action, containment support and escalation during cybersecurity incidents.

Attack Surface Management

• Monitor external exposure, review discovered assets, validate potential exposure, coordinate findings with relevant system owners and support remediation tracking.

Preventive Maintenance and Lifecycle Support

• Support firmware upgrade, patching, backup, configuration review, certificate renewal, licence tracking, EOL/EOS monitoring and preventive maintenance activities.

Change Management and CAB Support

• Prepare technical input for Change Request, implementation plan, rollback plan, risk assessment, maintenance window and post-implementation verification.

Project and Implementation Support

• Support security infrastructure deployment, migration, integration testing, user acceptance support, technical validation and handover from project to BAU.

Network Integration and Connectivity Support

• Coordinate VLAN, routing, IP addressing, interface configuration, traffic flow verification and connectivity testing with network and system teams.

Documentation and Knowledge Management

• Maintain SOPs, configuration records, network diagrams, asset inventory, baseline settings, implementation records and operational runbooks.

Vendor and Third-Party Coordination

• Coordinate with vendors, system integrators, managed service providers and support principals for troubleshooting, maintenance, incident support and knowledge transfer.

Compliance and Audit Support

• Provide evidence, configuration records, logs, SOPs and technical clarification for internal audit, ISMS, regulatory compliance, CSA 2024 readiness and management reporting.

Qualification & Work Experience

• 1. Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, Information Security, or other related discipline with a minimum CGPA of 3.00.
• 2. Minimum 1 to 5 years of relevant experience in network security, security infrastructure operations, firewall administration, SOC support, infrastructure security, system integration or cybersecurity operations.
• 3. Professional certification or technical training in one or more of the following areas is an added advantage:
  • Network security, firewall administration, or secure network design.
  • Fortinet / Palo Alto / Check Point / Cisco / F5 / equivalent security platforms.
  • WAF, VPN, Load Balancer, Reverse Proxy, or ASM technologies.
  • Security operations, incident response, or threat monitoring.
  • ISO/IEC 27001, risk management, audit, or cybersecurity compliance.
  • ITIL, change management, or service management
• 4. Have practical exposure to firewall policy management, network troubleshooting, security monitoring, infrastructure maintenance, incident support, change management, and vendor coordination.
• 5. Experience in government, regulatory, telecommunications, or critical infrastructure environments is an added advantage.

Technical Competencies/Skills

• Security architecture, firewall architecture, segmentation, routing, switching, VPN, and secure connectivity.
• Firewall rule management, NAT, ACL, VPN configuration, WAF policy, Reverse Proxy, Load Balancer, and security appliance operations
• Analyse traffic flow, logs, alerts, indicators of compromise, and abnormal network behaviour
• Vulnerability management, attack surface exposure, patch management, EOL/EOS risk, and infrastructure hardening
• Support incident response through log extraction, containment support, infrastructure evidence gathering, and escalation
• Change management, CAB process, implementation planning, rollback procedure, and post-change validation
• Technical documentation, SOPs, network diagrams, configuration records, asset inventory, and operational reports
• Security monitoring platforms, SIEM integration, syslog forwarding, certificate management, and infrastructure backup
• Coordinate with vendors, system owners, project teams, and technical stakeholders

Behavioral Competencies/Skills

• Strong sense of accountability, confidentiality, and operational discipline
• Work independently with minimum supervision while escalating matters appropriately
• Prioritize operational issues based on risk, impact, urgency, and service continuity
• Analytical thinking and troubleshooting capability
• Good communication skills in Bahasa Malaysia and English, both written and verbal
• Explain technical issues in clear management language.
• Coordination and stakeholder management skills
• High sense of urgency during an incident, outage, or security escalation
• Willing to learn new technologies and adapt to evolving cyber threats

Candidate must be willing to work in Cyberjaya and a Malaysian citizen.