NGO - IT Security Engineer

Payment Network Malaysia; Malaysia; Vor Ort; MYR 120.000 - 180.000; Vollzeit

Zusammenfassung

Payment Network Malaysia is seeking an experienced Security Engineer to shape and harden the Nexus Operator environment across cloud, infrastructure and applications. You will design, implement and continuously improve security controls, drive secure-by-design practices, and coordinate with SOC/MSSP partners to strengthen monitoring, detection and incident response.

The role requires 8+ years in cyber security or security engineering and the ability to communicate complex risks to technology

Qualifikationen

• 8+ years of experience across cyber security or security engineering.
• Hands-on experience across security architecture, cloud security, and application security.
• Experience with SOC or MSSP services and responding to significant security events.
• Ability to communicate complex security issues to engineers and technology leaders.

Aufgaben

• Design, implement and improve security controls across cloud, infrastructure and application environments.
• Drive security reviews for technology projects, integrations, architecture changes and production releases.
• Own vulnerability identification, prioritisation and remediation tracking, ensuring material weaknesses are addressed.
• Work with SOC and MSSP partners to investigate security events, improve detection capabilities and coordinate technical incident response.
• Coordinate penetration testing and technical security assessments, translating findings into remediation actions.
• Support security governance, audits and regulatory assessments with technical risk analysis and evidence.

Kenntnisse

Security engineering

Cloud security

Application security

Vulnerability management

Threat detection

Jobbeschreibung

• Shape the security controls protecting technology that supports the Nexus Operator environment
• Apply security engineering expertise to critical, high-availability payment infrastructure
• Influence security decisions across cloud platforms, applications and third-party integrations
• Work closely with engineering, technology operations and external security specialists to reduce cyber risk
• Build practical security controls that enable technology delivery without compromising resilience or trust

TL;DR

• Own the engineering and continuous improvement of technical security controls across the Nexus Operator environment
• Drive secure-by-design practices across infrastructure, cloud platforms, applications and technology releases
• Lead vulnerability management and technical security assessments, prioritising remediation based on risk
• Work with SOC and MSSP partners to strengthen monitoring, detection and incident response
• Assess technical security risks and provide clear recommendations to technology leadership
• Build evidence that demonstrates security controls are implemented and operating effectively

Why This Role Matters

• Protect the confidentiality, integrity, availability and resilience of critical technology
• Identify security weaknesses before they become operational or customer-impacting incidents
• Ensure new platforms and technology changes incorporate appropriate security controls from the outset
• Strengthen cyber defence by connecting engineering, vulnerability management and threat detection
• Give technology leaders clear technical insight into security risks and remediation priorities

What You Will Actually Do

• Design, implement and continuously improve security controls across cloud, infrastructure and application environments
• Drive security reviews for technology projects, integrations, architecture changes and production releases
• Own vulnerability identification, prioritisation and remediation tracking, validating that material weaknesses are effectively addressed
• Work with SOC and MSSP partners to investigate security events, improve detection capabilities and coordinate technical incident response
• Coordinate penetration testing and technical security assessments, translating findings into practical remediation actions
• Support security governance, audits and regulatory assessments by providing technical risk analysis, control evidence and subject-matter expertise

Examples of This Role in Practice

• A critical release contains an unresolved vulnerability: assess its exploitability and business impact, recommend mitigating controls and escalatWhen the residual risk exceeds agreed tolerances
• The SOC flags suspicious activity in production: investigate the technical indicators, coordinate containment and bring in the right specialists when escalation is required
• A new cloud service is being introduced: review its architecture, challenge control gaps and define the security requirements required before production
• A penetration test identifies a weakness across multiple applications: determine the underlying issue and work with engineering teams on sustainable remediation
• An auditor requests evidence that a key security control is operating effectively: provide traceable technical evidence and address gaps before they become repeat findings

What Will Help You Succeed

• Bring 8+ years of experience across cyber security, information security or security engineering
• Demonstrate strong hands-on experience across security architecture, cloud security, application security, vulnerability management and cyber defence
• Apply practical experience working with SOC or MSSP services and responding to significant security events
• Navigate regulated or high-availability technology environments with the judgment to identify and elevate material technical risks
• Communicate complex security issues clearly to engineers, technology leaders and non-security stakeholders
• Strengthen your technical expertise through certifications such as CISSP, CCSP, GIAC or equivalent, with payments or financial-services experience an advantage