Information Security Engineer

Future D; Selangor; On-site; MYR 200,000 - 250,000; Full time

Job summary

A leading cybersecurity firm in Malaysia seeks a skilled cybersecurity professional. Candidates should possess a diploma or degree in IT, Computer Science, or Cybersecurity, along with strong communication skills to explain complex concepts to non-technical users. The role involves addressing security-related issues, conducting penetration testing, and ensuring compliance with cybersecurity incidents. A supportive work environment with benefits like allowances and team activities is provided.

Benefits

Allowance provided

Monthly fun activities with all teams

Supportive & friendly working environment

Qualifications

• Strong IT background with an emphasis on cybersecurity principles.
• Ability to clearly explain technical concepts to non-technical stakeholders.
• Experience in incident response and threat mitigation.

Responsibilities

• Address security-related issues both remotely and on-site.
• Collaborate with teams to resolve complex security incidents.
• Participate in an on-call rotation for urgent breaches.
• Maintain security documentation and logs.
• Conduct penetration testing and support security assessments.
• Develop security awareness programs.

Skills

Communication skills

Cybersecurity project management

Team collaboration

Problem-solving

Education

Diploma or degree in IT, Computer Science, or Cybersecurity

Tools

Vulnerability scanning tools

Incident response tools

Firewall and antivirus solutions

Job description

Requirements

• A diploma or degree in IT, Computer Science, or Cybersecurity.
• Strong communication skills, especially in explaining security concepts and solutions to nontechnical users. Ability to document and expedite security incidents clearly.
• Proven ability to work independently, lead cybersecurity troubleshooting efforts, and handle security-related projects.
• Demonstrated ability to collaborate with internal and external teams to drive quick resolution of security threats.

Technical Skills and Knowledge

• Familiarity with endpoint protection, firewalls, intrusion detection/prevention systems, SIEM (Security Information and Event Management), and threat intelligence platforms.
• Strong understanding of network security protocols and the ability to identify and mitigate common vulnerabilities.
• Experience with vulnerability scanning tools, patch management, and remediation techniques to ensure the security of systems and applications.
• Knowledge of incident response methodologies and tools used to investigate and resolve security breaches.
• Familiarity with securing cloud environments and understanding of virtualization security challenges.
• Understanding of data encryption, data loss prevention strategies, and backup solutions to ensure the integrity and confidentiality of data.

Key Certifications (Optional but Beneficial)

• CompTIA Security+, Systems Security Certified Practitioner (SSCP), Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Hack The Box Certified Penetration Testing Specialist (HTB CPTS), or other relevant certifications.

Responsibilities

• Offer remote or on-site support, addressing security-related issues, incidents, and inquiries. Proactively monitor and mitigate security threats and breaches.
• Work closely with internal security teams or external partners to resolve complex security issues, perform root cause analysis, and ensure resolution in a timely manner.
• Participate in an on-call rotation for after-hours support, addressing urgent security incidents or breaches. Ensure compliance with Service Level Agreements (SLAs) for cybersecurity incidents.
• Maintain and update security logs, ticketing systems, and documentation related to incidents, vulnerability scans, security assessments, and patch management.
• Support security assessments, conduct penetration testing, or assist in User Acceptance Testing (UAT) to validate that security measures are in place for new implementations or system updates.
• Contribute to developing and maintaining security awareness programs and training materials to ensure stakeholders are aware of cybersecurity risks and best practices.
• Assist in the deployment, configuration, and maintenance of IT and cybersecurity solutions (eg, firewalls, antivirus/EDR, VPNs, SIEM, and access control solutions) internally and customers’ locations.

Benefits

• Allowance provided
• Monthly fun activities with all teams
• Supportive & friendly working environment