Head, Cybersecurity Engineering & Research

Malaysian Communications and Multimedia Commission; Cyberjaya; On-site; MYR 180,000 - 300,000; Full time

Job summary

The Malaysian Communications and Multimedia Commission is seeking a Head of Network Security Research to lead development and implementation of innovative security solutions, conduct threat research, and strengthen the security and reliability of national network infrastructure.

The role requires a degree in CS/IT and a minimum of 10 years in software development with security management experience, plus relevant cybersecurity certifications.

Qualifications

• Degree in Computer Science, Information Technology, or related field.
• Minimum 10 years of working experience in software development (frontend and backend) with solid understanding security management, and with relevant professional certification in network, information and/or cybersecurity.

Responsibilities

• Implement innovative solutions to enhance security, resiliency, and reliability of network infrastructure and services including critical network information infrastructure.
• Plan and manage development security tools, AI systems, and benchmark emerging security technologies.
• Drive process automation to improve operations and service delivery within the division and with external stakeholders.
• Study, identify, and evaluate emerging threats and risks; develop mitigation strategies, tools, and systems.
• Perform vulnerability assessments and penetrations on communications & digital products, services, systems, and organizations; pursue corrective actions.
• Undertake threat intelligence gathering and horizon-scanning to increase situational awareness.
• Lead R&D activities exploring new technologies to enhance capabilities while reducing vendor dependence.
• Establish research partnerships with academia to enhance capabilities, processes, tools, and systems.
• Collaborate with agencies, law enforcement, service providers, vendors on mitigating cyber crimes and misuse of telecom services.
• Forecast capacity and identify gaps; coordinate training and capacity building for staff.
• Plan and monitor the department budget to ensure efficient use of funds.
• Provide coaching and mentoring to staff to help them reach their potential.

Job description

Job Summary

The Head of Network Security Research Department is responsible in leading and managing the development and implementation of innovative solutions for security and operational challenges; conduct research on emerging security threats and vulnerabilities; develop and maintain relationships with stakeholders; and drive initiatives to enhance the security, resiliency, and reliability of network infrastructure and services, including critical network information infrastructure.

Job Responsibilities

1. Implement innovative solutions and initiatives to enhance the security, resiliency, and reliability of network infrastructure and services, including critical network information infrastructure.
2. Plan and manage the development security tools, artificial intelligence systems, and benchmark emerging security technologies to strengthen the overall security posture of organizations and stakeholders.
3. Drive process automation initiatives to enhance operations and service delivery within the division, sector, organization, and among external stakeholders.
4. Study, identify, and evaluate emerging security threats and risks, and develop effective mitigation strategies, tools, and systems to manage those threats and risks.
5. Implement vulnerability assessment and penetrations tests on communications & digital products, services, systems, and organizations to identify security vulnerabilities, and pursue corrective action to address them.
6. Undertake threat-intelligence gathering and horizon–scanning activities to increase situational awareness and preparedness against arising security threats and risks.
7. Undertake strategic and tactical R&D activities exploring new technologies and techniques towards enhancing MCMC and industry’s capabilities, while reducing over-dependency on vendor-supplied solutions in network/cyber security.
8. Establish research partnership with the academia in the enhancement of capabilities, processes, tools, and systems.
9. Collaborate with technical agencies, law enforcement agencies, service providers, vendors, and other relevant parties on the mitigation of cyber-dependent crimes, cyber-enabled crimes, and the misuse of telecommunications services.
10. Forecast and identify capacity and expertise gaps within the department, and to enhance the necessary skillsets through comprehensive training and capacity building.
11. Plan, monitor, and control the financial budget and costs to ensure effective and efficient utilization and management of funds.
12. Provide coaching, guidance, and mentoring to all staff within the department to motivate staff to fulfil their self-actualization.

Qualification & Work Experience

1. Degree in Computer Science, Information Technology, or related field.
2. Minimum 10 years of working experience in software development (frontend and backend) with solid understanding security management, and with relevant professional certification in network, information and/or cybersecurity.

Technical Competencies/Skills

1. DevSecOps principles.
2. Security Posture Assessment (SPA).
3. CIS principles.
4. Ethical hacking.
5. Threat intelligence and management.
6. Incident handling and management.
7. Vulnerability Assessment and Penetration Testing (VAPT)
8. Information Security.
9. Project Management.
10. Strategic Communications.
11. Business Process Management.

Behavioural Competencies

1. Creative and innovative.
2. Problem solving skills.
3. Analytical thinking.
4. Stakeholder management.
5. Teamwork and collaborations.
6. Communications and Presentation Skills (BM & English).
7. Writing skills (BM & English).