Network Security Engineer

Dexian Asia Pacific; Kuala Lumpur; On-site; MYR 90,000 - 130,000; Full time

Job summary

Dexian Asia Pacific in Malaysia is seeking a network security engineer to design, implement, and manage security strategies across industrial networks. You will operate security appliances (Palo Alto, Fortigate, Cisco ASA/FTD/FMC), build automated security infrastructure, and drive Zero-Ops initiatives while supporting threat monitoring and incident response.

You will coordinate with Cybersecurity and Projects, document processes, and handle vulnerability management with a proactive,

Qualifications

• Solid experience with industrial network security architectures.
• Hands-on with Palo Alto, Fortigate, and Cisco ASA/FTD/FMC.
• Strong networking fundamentals (TCP/IP, OSI, routing, ACLs).
• Overtime required on ad-hoc basis for working beyond scheduled hours.

Responsibilities

• Design, implement, and manage network security strategies across the industrial networks - internal and external connections.
• Research and recommend industry best practices and emerging technologies in network security.
• Operate and maintain security appliances (Palo Alto, Fortigate), including upgrades and patching.
• Build and manage network security infrastructure using DevOps practices and automation tools.
• Contribute to the Zero-Ops vision by developing solutions that reduce manual intervention and improve operational efficiency.
• Support security operations: monitoring, analysis, incident response, and vulnerability management.
• Evaluate security advisories and vulnerabilities, providing timely recommendations and mitigations.
• Participate in ad-hoc vulnerability assessments and response planning.
• Coordinate with stakeholders across Cybersecurity, Projects, and internal customers.
• Develop and maintain operational processes and documentation for ongoing support and hygiene.

Skills

Palo Alto

Fortigate

Cisco ASA/FTD

Job description

Job Responsibilities :

• Design, implement, and manage network security strategies across the industrial networks - internal and external connections.
• Research and recommend industry best practices and emerging technologies in network security.
• Operate and maintain security appliances (Palo Alto, Fortigate), including upgrades and patching.
• Build and manage network security infrastructure using DevOps practices and automation tools.
• Contribute to the Zero-Ops vision by developing solutions that reduce manual intervention and improve operational efficiency.
• Support security operations: monitoring, analysis, incident response, and vulnerability management.
• Evaluate security advisories and vulnerabilities, providing timely recommendations and mitigations.
• Participate in ad-hoc vulnerability assessments and response planning.
• Coordinate with stakeholders across Cybersecurity, Projects, and internal customers.
• Develop and maintain operational processes and documentation for ongoing support and hygiene.

On call support:

24 x 7 (1 week) rotation, approximately 4-5 weeks rotation cycle

Primary skill set (List 3 mandatory technical skill sets) :

• Proficient with security platforms: Palo Alto (Firewall, Panorama), Fortigate (Firewall, FortiManager), Cisco (ASA, FTD, FMC)
• Strong understanding of networking fundamentals: TCP/IP, OSI model, routing/switching, ACLs.
• Familiarity with security technologies: firewalls, VPNs, IDS/IPS, encryption, authentication, vulnerability management, and incident response.
• Overtime required on ad-hoc basis for working beyond scheduled working hours.