Network Security Engineer

ViewQwest; Kampung Malaysia Tambahan; On-site; MYR 120,000 - 180,000; Full time

Job summary

ViewQwest is seeking a Network Security Engineer to design, implement, maintain, and improve network security solutions at our Kuala Lumpur office. You will lead posture management, perimeter defenses, and automation initiatives to protect critical infrastructure.

The ideal candidate has 5–10 years in information security with hands-on firewall, VPN, and security appliance experience, plus scripting and automation skills. ISO 27001/NIST/PCI-DSS awareness is preferred.

Qualifications

• Bachelor's or Associate's degree in IT, Computer Science, or related field.
• 5-10 years of information security and IT risk management with focus on network security.
• Hands-on experience with firewalls, VPNs, and network security appliances.
• Certifications such as CISSP, CCNP Security, PCNSA/PCNSE or equivalent are advantageous.
• Experience with automation tools such as Ansible, Python scripting, and vendor APIs is highly desirable.

Responsibilities

• Lead design, implementation, maintenance, and continuous improvement of network security solutions.
• Lead network security posture management, system operations, and perimeter defense controls.
• Automate patch deployment and configuration hardening; report posture metrics to leadership.
• Ensure compliance with ISO 27001, NIST, PCI-DSS during audits and remediation of findings.
• Share threat intelligence and best practices with the security team.

Job description

We are looking for a Network Security Engineer to be responsible for the design, implementation, maintenance, and continuous improvement of network security solutions. You will lead network security posture management, system operations, perimeter defense controls, compliance activities, and automation initiatives to protect critical infrastructure.

To be successful in this role, you should have solid experience in information security and network infrastructure, with a strong understanding of security protocols, firewalls, VPNs, and risk management. You should also possess strong interpersonal and communication skills and be able to collaborate effectively with a wide variety of stakeholders.

Primary Responsibilities:

Network Security Posture & Firmware Patching

• Lead monthly patching cycles for network security devices and firmware
• Automate patch deployment where possible (e.g., via Ansible or vendor tools)
• Perform configuration hardening audits and remediate posture drifts
• Report posture metrics and status to leadership

Management and Maintenance of Network Security Systems

• Monitor system health and performance of network security platforms
• Perform regular backups and disaster recovery testing
• Manage device groups, templates, and stacks
• Push policy changes safely and tune logging and reporting

Perimeter Defense & Network Security Controls Implementation

• Design and configure firewalls, VPNs, Network Access Control (NAC), and segmentation policies
• Conduct pre- and post-implementation testing
• Integrate security controls with monitoring and SIEM tools

Compliance, Auditing & Security Hardening

• Achieve and maintain compliance with relevant standards (e.g., ISO 27001, NIST, PCI-DSS network controls) during annual and internal audits
• Remediate all audit findings within defined SLAs

Knowledge Sharing, Automation & Professional Development

• Automate repetitive tasks using Python, Ansible, Panorama API, or other tools
• Pursue relevant professional certifications and stay current with emerging threats and technologies
• Share threat intelligence, findings, and best practices with the broader security team

Requirements:

• A bachelor's or associate's degree in IT, Computer Science, or a related field
• 5-10 years' experience in information security and IT risk management, with a strong focus on network security
• IT security or risk assessment certifications are advantageous (e.g., CISSP, CCNP Security, PCNSA/PCNSE, or equivalent)
• Hands-on experience managing firewalls, VPNs, and network security appliances
• Advanced understanding of security protocols, cryptography, network segmentation, and security architectures
• Strong working knowledge of IT risks, security implementations, and common operating systems
• Experience with automation tools such as Ansible, Python scripting, and vendor APIs is highly desirable
• Excellent problem-solving, communication, teaching, and interpersonal skills

This position will be based at our Kuala Lumpur office in Malaysia.