Information Security Operations Lead (Penang / Johor)

Randstad Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Randstad Malaysia is seeking a hands-on Senior Security Engineer to maintain enterprise security controls across endpoint, identity, data, network, and email in a Malaysian on-site role. Based in Simpang Ampat, Penang, or Pasir Gudang, Johor, you will respond to live alerts, drive investigations end-to-end, tune detections, and develop runbooks with the security team.

You should have 7–10+ years of security engineering/SecOps experience, strong knowledge of CrowdStrike, Intune/Entra, Palo Alto,

Qualifications

• 7–10+ years hands-on experience in security engineering or SecOps.
• Strong knowledge of endpoint, identity, network, email, DNS, and cloud security controls.
• Experience operating and troubleshooting security platforms.
• Ability to develop incident response runbooks and escalation paths.

Responsibilities

• Manage and validate security controls continuously, overseeing systems such as CrowdStrike Falcon, Microsoft Intune/Entra ID/Conditional Access, Sumo Logic, Palo Alto firewalls, Cisco Email Security (DMARC/DKIM/SPF), Cisco Umbrella, and HP Aruba Clearpass.
• Design, implement, and maintain network security policies, email posture, and DNS-layer visibility.
• Develop, maintain, and standardize incident response runbooks, playbooks, and escalation paths.
• Partner across identity and infrastructure teams to integrate security into architectural designs, while mentoring junior engineers.

Skills

Security engineering

Incident response

Threat detection tuning

Endpoint security

Cloud security

Network security

Education

Bachelor Degree

Tools

CrowdStrike Falcon

Microsoft Intune/Entra ID

Palo Alto

Cisco Email Security

Cisco Umbrella

HP Aruba Clearpass

Job description

About the company

The organization is a leading global technology provider of automation solutions with over 40 years of expertise in the semiconductor and laboratory automation industries. The company offers precision robotics, integrated automation systems, and contamination control solutions that empower high-tech manufacturers worldwide. Known for a customer-focused and innovative culture, the company prioritizes leveraging cutting-edge cloud technologies and dynamic solutions to drive continuous transformation and tech advancement.

About the job

• Role Overview: This is a hands-on operational role focused on ensuring the daily effectiveness and health of key enterprise security controls across endpoint, identity, data, network, and email environments.




• Work Location: Onsite position based in either Simpang Ampat, Penang or Pasir Gudang, Johor.




• Core Function: This position moves beyond policy or architecture-only responsibilities to place you directly in security tools, responding to live security alerts, driving investigations end-to-end, tuning detection's to reduce alert fatigue, and conducting root cause analysis.

Key Responsibilities

• Manage and validate security controls continuously, overseeing systems such as CrowdStrike Falcon, Microsoft Intune/Entra ID/Conditional Access, Sumo Logic, Palo Alto firewalls, Cisco Email Security (DMARC/DKIM/SPF), Cisco Umbrella, and HP Aruba Clearpass.




• Design, implement, and maintain network security policies, email posture, and DNS-layer visibility.




• Develop, maintain, and standardize incident response runbooks, playbooks, and escalation paths.




• Partner across identity and infrastructure teams to integrate security into architectural designs, while mentoring junior engineers.

Requirements

• Experience: Minimum of 7 to 10+ years of hands-on experience in security engineering, network engineering, or SecOps, with a proven track record of operating and troubleshooting security platforms.



• 
  

  Core Competencies:

  
  
  
  

  • Strong technical understanding of endpoint, identity, network, email, DNS, and cloud security controls.

  
  

  • Expertise in logging, detection tuning, and end-to-end incident investigation workflows.

  
  

  • Excellent communication skills to articulate technical risks clearly without escalation drama.

  
  
  
  


• 
  

  Preferred Qualifications:

  
  
  
  

  • Experience with cloud platforms (Azure, AWS, OCI).

  
  

  • Scripting and automation capabilities using PowerShell or Python.

  
  

  • Professional certifications such as CISSP, Palo Alto, Cisco, or Microsoft credentials.

  
  
  
  

experience

6 years

skills

no additional skills required

qualifications

no additional qualifications required

education

Bachelor Degree