Lead Endpoint Security & IAM Defense Engineer

GXBank; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

GXBank is seeking a cybersecurity engineer to lead the implementation and management of endpoint security platforms (EDR/XDR), collaborate with the SOC, and enhance detection rules and playbooks. You will analyze IoCs, manage DLP, and drive endpoint hardening across regions.

The role requires 3–5 years in cybersecurity, hands-on experience with SIEM, threat intelligence, IAM/Iga, PAM, and scripting. You will work with risk, IT and business teams to enforce least-privilege access and regulatory

Qualifications

• Minimum 3–5 years of experience in cybersecurity engineering or operations.
• Hands-on experience with EDR/XDR platforms including detection tuning and incident handling.
• Experience working with SOC team, SIEM tools and threat intelligence feeds.
• Understanding of IoCs, attack techniques and threat hunting concepts.
• Familiarity with network security and DDoS mitigation.
• Experience in vulnerability management and endpoint hardening.
• Experience in IAM/IGA administration, privileged access or enterprise identity management.
• Hands-on experience with PAM solutions and endpoint privilege management is a plus.
• Ability to lead compliance programs, access review initiatives and IAM platform improvements.
• Basic scripting/automation skills (PowerShell, Python) is a plus.
• Strong analytical and problem-solving skills.

Responsibilities

• Lead implementation and management of endpoint security platforms (EDR/XDR) including tuning, threat detection and response improvements.
• Work closely with SOC team to investigate alerts, respond to incidents and enhance detection rules and playbooks.
• Analyze and act on Indicators of Compromise (IoCs) using threat intelligence to proactively detect and mitigate threats.
• Manage and optimize DLP solutions to prevent data exfiltration across endpoints and platforms.
• Perform continuous endpoint hardening, vulnerability remediation and attack surface reduction.
• Monitor and respond to DDoS alerts and network-based threats, coordinating with infrastructure teams.
• Lead IAM platform operations including SailPoint IGA, PAM solutions and endpoint privilege management.
• Conduct access reviews and regulatory workflows for privileged users.
• Collaborate with risk, cybersecurity, IT and business teams to enforce RBAC and least-privilege access policies.
• Ensure security controls align with policies and regulatory requirements (e.g., BNM FinTips).
• Support incident response activities including containment, eradication and recovery.
• Evaluate and implement new security tools, automation and improvements to enhance operational efficiency.
• Maintain technical documentation and operational procedures for security platform s

Skills

EDR/XDR platforms

Incident handling

Threat detection

Threat intelligence

SOC collaboration

Vulnerability management

IAM/IGA administration

PAM / privileged access

RBAC / least privilege

Scripting (PowerShell, Python)

Tools

SIEM tools

SailPoint IGA

PAM solutions

Threat intelligence feeds

DLP

Job description

GXBank is seeking a cybersecurity engineer to lead the implementation and management of endpoint security platforms (EDR/XDR), collaborate with the SOC, and enhance detection rules and playbooks. You will analyze IoCs, manage DLP, and drive endpoint hardening across regions.

The role requires 3–5 years in cybersecurity, hands-on experience with SIEM, threat intelligence, IAM/Iga, PAM, and scripting. You will work with risk, IT and business teams to enforce least-privilege access and regulatory