L1 Cyber Security Engineer (Hybrid – Onsite & Remote)

EM INDUSTRIAL AUTOMATION SDN. BHD.; Kuala Lumpur; Remote; MYR 50,000 - 70,000; Full time

Job summary

A leading security solutions provider in Kuala Lumpur is seeking an L1 Security Engineer to assist in the onboarding and maintenance of security technology. This position is aimed at early-career engineers looking for hands-on experience with various security tools. Responsibilities include deployment of security tools, initial troubleshooting, and documentation of configurations. Competitive salary offered between RM50,000 – RM70,000/year based on qualifications.

Benefits

Competitive salary

Access to enterprise-grade security labs

Structured training program

Qualifications

• 0-2 years of experience in IT support or entry-level security operations.
• Familiarity with command-line interfaces.
• Experience in technical troubleshooting.

Responsibilities

• Assist in deployment and configuration of security tools.
• Perform health checks and connectivity validation for clients.
• Monitor system alerts and troubleshoot failures.

Skills

Foundational knowledge of networking fundamentals

Basic understanding of cloud platforms

Problem-solving skills

Communication skills

Education

Diploma or Bachelor’s degree in Cybersecurity or related field

Tools

EDR tools (CrowdStrike, SentinelOne)

Firewalls (Palo Alto, Fortinet)

SIEM tools (Splunk, Wazuh)

Job description

Overview

The L1 Security Engineer plays a critical role in the successful onboarding, maintenance, and operational health of our security technology stack. You will work closely with the SOC, Customer Success, and Implementation teams to ensure seamless deployment and performance of endpoint protection, firewalls, EDR, SIEM agents, and cloud security controls. This position is ideal for an early-career engineer who wants hands-on experience across multiple security technologies and a clear path into advanced roles such as Security Automation Engineer, DevSecOps, or Threat Response.

Key Responsibilities

• Assist in the deployment and configuration of security tools (EDR, firewalls, SIEM forwarders, cloud sensors) across client environments (on-prem, cloud, hybrid).
• Perform initial health checks and connectivity validation for newly onboarded clients.
• Monitor system alerts and perform first-level troubleshooting of agent failures, log ingestion issues, policy misconfigurations, and connectivity problems.
• Follow standard operating procedures (SOPs) for routine tasks: patching, certificate renewals, log source onboarding, access provisioning.
• Escalate complex technical issues to L2/L3 Security Engineers with detailed diagnostics and logs.
• Maintain accurate documentation of configurations, client environments, and known issues.
• Support incident response readiness activities, including backup verification and failover testing.
• Collaborate with the SOC and Customer Success teams to resolve service-impacting events within SLA.
• Assist in vulnerability scan coordination and remediation tracking.
• Participate in change management processes and release deployments.

Required Qualifications & Skills

• Diploma or Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
• 0–2 years of experience in IT support, systems administration, or entry-level security operations.
• Foundational knowledge of: networking fundamentals (IP addressing, DNS, DHCP, VLANs, routing); cloud platforms (AWS, Azure, or GCP) – basic understanding; security tools (EDR e.g., CrowdStrike, SentinelOne; firewalls e.g., Palo Alto, Fortinet; SIEM e.g., Splunk, Sentinel, Wazuh).
• Familiarity with: command-line interfaces (PowerShell, Bash); basic scripting (Python, PowerShell, or Bash) for automation; MITRE ATT&CK framework and common attack patterns.
• Strong problem-solving skills and ability to follow technical runbooks; excellent attention to detail and communication skills (written and verbal).

Preferred Attributes

• Certifications such as CompTIA Security+, Network+, Microsoft SC-900, AZ-900, AWS Cloud Practitioner or Azure Fundamentals, GIAC GSAT or entry-level SANS certifications.
• Experience with remote monitoring and management (RMM) tools.
• Understanding of data privacy regulations in Singapore (PDPA) and regional compliance needs.
• Willingness to work occasional off-hours during client migrations or incident support windows.

What We Offer

• Competitive salary: RM50,000 – RM70,000/year (based on qualifications and potential)
• Access to enterprise-grade security labs and real-world client projects
• Structured training program in cloud security, automation, and incident response