Infra Security Ops Engineer

MR DIY International; Seri Kembangan; On-site; MYR 80,000 - 160,000; Full time

Job summary

MR DIY International is seeking an Infra Security Operations Engineer to safeguard the organization’s IT infrastructure across on-prem, cloud, and endpoints. You will implement security controls, monitor alerts, and drive vulnerability remediation while maintaining compliance and security documentation.

You will collaborate with cross‑functional teams to improve security practices, perform incident investigations, and ensure timely remediation of identified risks in a fast-paced environment.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Computer Engineering, Cybersecurity, or a related field.
• Hands-on experience in infrastructure security monitoring, vulnerability management, patch management, and security hardening.
• Familiarity with security monitoring tools, security event analysis, and incident response processes.
• Know ledge of access management, privileged access controls, endpoint protection, and security best practices.
• Understanding of vulnerability assessment, risk prioritization, and remediation tracking.

Responsibilities

• Monitor and maintain the security of IT infrastructure—servers, networks, cloud, and endpoints.
• Implement and maintain infrastructure security controls per policies and requirements.
• Conduct configuration reviews and ensure secure, hardened systems.
• Investigate security alerts and potential threats affecting infrastructure.
• Coordinate vulnerability remediation and patch management activities.
• Support incident monitoring, investigation, containment, recovery, and reporting.
• Maintain documentation of security configurations, incidents, and remediation status.

Skills

Infrastructure Security Ops

Security Monitoring

Vulnerability Management

Patch Management

Incident Response

Network Security

Cloud Security

Security Hardening

Access Management

Analytical Skills

Education

Bachelor's Degree in IT/CS/CE/Cybersecurity

Tools

Firewalls

VPN

Endpoint Protection

Job description

Job Summary

The Infra Security Operations Engineer is responsible for implementing, monitoring, maintaining, and improving the security of the organization's IT infrastructure. This role focuses on infrastructure security operations across network, servers, cloud, and endpoint environments, ensuring security controls are effectively implemented to protect IT systems, data, and business operations. The role also supports security incident investigation, vulnerability remediation, infrastructure hardening, compliance requirements, and continuous improvement of infrastructure security practices.

Key Responsibilities

• Infrastructure Security Operations
• Monitor and maintain the security of IT infrastructure, including servers, networks, cloud environments, and endpoint systems.
• Implement and maintain infrastructure security controls in accordance with the organization's IT security policies, standards, and operational requirements.
• Perform infrastructure security configuration reviews and ensure systems are securely configured and hardened.
• Monitor security alerts, identify potential threats, and investigate suspicious activities affecting infrastructure environments.
• Support the implementation and maintenance of firewalls, access controls, endpoint protection, and other infrastructure security solutions.
• Conduct routine security checks to identify misconfigurations, weaknesses, and potential security risks.
• Vulnerability & Patch Management
• Conduct regular vulnerability assessments and coordinate the remediation of identified vulnerabilities across infrastructure environments.
• Monitor security advisories and assess their potential impact on the organization's IT systems.
• Coordinate infrastructure patching, security updates, and remediation activities to address known vulnerabilities.
• Track remediation progress and ensure security issues are addressed within the required timelines.
• Validate the effectiveness of remediation activities and maintain records of vulnerability findings and closure status.
• Work with infrastructure and application teams to prioritize remediation based on risk and business impact.
• Security Incident Monitoring & Response
• Monitor, investigate, and respond to infrastructure-related security incidents and alerts.
• Perform initial analysis of security events, identify potential root causes, and elevate incidents requiring further investigation.
• Coordinate with the Information Security, IT Infrastructure, and relevant technical teams to contain and resolve security incidents.
• Support incident response activities, including evidence collection, investigation, recovery, and documentation.
• Prepare incident reports and recommend corrective and preventive measures to reduce the likelihood of recurrence.
• Participate in post-incident reviews and support continuous improvement of security monitoring and response procedures.
• Network, Server & Cloud Security
• Support the implementation and maintenance of security controls across enterprise network infrastructure, including LAN, WAN, Wi-Fi, VPN, and firewalls.
• Ensure appropriate access controls and security configurations are maintained across servers, operating systems, virtualization platforms, and cloud infrastructure.
• Review user and privileged access permissions to ensure access is granted according to business requirements and security policies.
• Support the implementation of secure configurations, network segmentation, and other infrastructure protection measures.
• Work with infrastructure teams to address security gaps and ensure infrastructure changes comply with established security requirements.
• Support security reviews for new infrastructure deployments, upgrades, and technology changes.
• Security Compliance & Risk Management
• Ensure infrastructure security operations comply with internal IT security policies, standards, procedures, and applicable regulatory requirements.
• Support internal and external IT security audits by providing relevant documentation, evidence, and technical information.
• Track infrastructure-related audit findings, security risks, and remediation actions to ensure timely closure.
• Maintain accurate documentation of security configurations, incidents, vulnerabilities, and operational activities.
• Identify infrastructure security risks and recommend appropriate mitigation measures.
• Support periodic reviews of security controls and operational procedures to improve compliance and reduce technology risks.
• Security Operations Improvement & Collaboration
• Collaborate with the Information Security, IT Infrastructure, application, and business teams to address infrastructure security requirements.
• Support the implementation and improvement of security monitoring, alerting, reporting, and response processes.
• Identify opportunities to automate repetitive security operations and improve operational efficiency.
• Maintain security operations reports, incident records, vulnerability tracking, and remediation updates.
• Participate in infrastructure and cybersecurity projects to ensure security requirements are incorporated into implementation and deployment activities.
• Stay informed about emerging infrastructure threats, vulnerabilities, and security technologies relevant to the organization's operating environment.

Job Requirements

• Bachelor's Degree in Information Technology, Computer Science, Computer Engineering, Cybersecurity, or a related field.
• Relevant experience in IT infrastructure, infrastructure security, cybersecurity operations, network security, or systems administration.
• Hands-on experience in infrastructure security monitoring, vulnerability management, patch management, and security hardening.
• Good understanding of enterprise IT infrastructure, including servers, operating systems, networks, virtualization, cloud platforms, and endpoint environments.
• Experience with network security technologies, including firewalls, VPN, network access controls, and network monitoring tools.
• Familiarity with security monitoring tools, security event analysis, and incident response processes.
• Knowledge of access management, privileged access controls, endpoint protection, and infrastructure security best practices.
• Understanding of vulnerability assessment processes, risk prioritization, and remediation tracking.
• Familiarity with cloud security concepts and security controls across on-premise and cloud environments.
• Understanding of IT security policies, compliance requirements, audit processes, and risk management practices.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good communication and documentation skills, with the ability to collaborate effectively with cross-functional technical teams.
• Ability to manage multiple security issues and operational priorities in a fast-paced environment.
• Relevant certifications such as CompTIA Security+, CEH, CISSP, CISM, CCNA/CCNP Security, Microsoft Security, AWS Security, or other infrastructure security-related certifications are an advantage.

Our Culture Is Built On GIVE

• Growth: Rapid development opportunities at every stage of your journey.
• International Exposure: Cross-border collaborations and secondments.
• Value Creation: Real ownership, real impact.
• Empowerment: A culture that trusts you to lead and innovate.

At MR DIY International, we're more than a global home improvement brand, we're a catalyst for ambitious talent ready to grow beyond borders. With over 5,000+ stores across 15 countries globally, we offer unmatched international exposure to those looking to build a meaningful, global career. From retail operations and merchandising to strategy, tech, and supply chain. Your work here shapes how millions of customers shop every day.