Principal Network Engineer

BROOKS AUTOMATION; Johor; On-site; MYR 100,000 - 150,000; Full time

Job summary

Join Brooks Automation as a Senior Network Security Engineer, where you'll design secure network infrastructures critical to our operations in the semiconductor industry. This role involves protecting complex enterprise environments while interacting with multiple teams to enhance overall security strategy and compliance. Ideal candidates will bring strong technical skills, proactive problem-solving abilities, and a relevant educational background.

Qualifications

• Minimum 5+ years in Network Security Engineering.
• Strong expertise in firewall management and secure network design.
• Knowledge of encryption protocols and incident response frameworks.

Responsibilities

• Design and maintain firewalls, VPNs, and network security solutions.
• Monitor network traffic for threats and conduct incident response.
• Collaborate with teams to enhance network security and visibility.

Skills

Network Security

Firewall Management

Incident Response

AWS Security

Analytical Skills

Education

Bachelor’s degree in Computer Science

Cybersecurity or related field

Tools

Palo Alto

Cisco

SIEM platforms

Job description

Brooks is a leading provider of automation solutions with over 40 years of experience in the semiconductor industry, offering precision robotics, integrated automation systems, and contamination control solutions that empower chip manufacturers worldwide. Our product portfolio includes a range of automation solutions, including robots, vacuum systems, and atmospheric robots for semiconductor manufacturing (www.brooks.com).

Are you looking for a place where you can be part of a transformation? Join us at Brooks Automation and be a part of a dynamic organization that is shaping the future of technology.

Principal Network Engineer - Job Description

About the Role:

Brooks is seeking a highly skilled Senior Network Security Engineer to join us at Brooks Automation Malaysia. You will design, implement, and manage secure network infrastructures while proactively identifying and mitigating security threats. This role requires deep expertise in network security technologies, incident response, and compliance frameworks.

Reporting to the Director of Infrastructure Architecture and Engineering (based in the US), the ideal candidate will be a proactive problem solver with strong technical and analytical skills, capable of securing complex enterprise environments.

Work Location: Onsite - Johor Bahru

Key Responsibilities:

• Design, implement, and maintain firewalls, VPNs, IDS/IPS, WAFs, and NAC solutions to protect network infrastructure.
• Configure and manage next-generation firewalls (NGFW), e.g., Palo Alto (must have experience).
• Ensure zero-trust architecture (ZTA) principles are applied across network security frameworks.
• Optimize network segmentation and micro-segmentation strategies for enhanced security.
• Implement and maintain DDoS mitigation, DNS security, and web filtering solutions.
• Experience with AWS transport and security services, including securing VPCs, Direct Connect, Transit Gateway, and associated security controls.
• Monitor and analyze network traffic for anomalies, threats, and intrusions using SIEM, SOAR, and threat intelligence platforms.
• Lead incident response efforts related to network security, including forensic analysis and root cause determination.
• Collaborate with SOC teams to enhance network visibility and proactive threat hunting.
• Perform regular penetration testing, vulnerability scans, and firewall rule reviews.
• Ensure compliance with NIST, ISO 27001, PCI DSS, or other regulatory frameworks.
• Implement security controls and policies aligned with industry best practices.
• Assist in audit readiness and remediation efforts for network security controls.
• Work closely with risk management teams to assess vendor and third-party security risks.
• Develop and implement network security automation using Python, Ansible, or scripting tools.
• Streamline firewall rule management and change control processes for efficiency.
• Utilize AI/ML-based security tools to enhance threat detection and mitigation.
• Other duties as assigned.

Required Qualifications & Competencies:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• Minimum 5+ years of experience in Network Security Engineering, Security Analysis, or a related role.
• Strong expertise in firewall management, intrusion detection/prevention, and secure network design.
• Hands-on experience with Cisco or Palo Alto security solutions.
• Proficiency with SIEM platforms and network traffic analysis tools.
• Experience with AWS security services, including VPC security, Direct Connect, and Transit Gateway.
• Knowledge of encryption protocols, PKI, and secure remote access technologies.
• Experience with incident response frameworks (MITRE ATT&CK, NIST CSF, or SANS IR).
• Strong analytical, troubleshooting, and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to work effectively in a team.

Nice to Have:

• Aruba ClearPass NAC configuration and management.
• Preferred Certifications (one or more):

-- CISSP (Certified Information Systems Security Professional)

-- CCNP Security (Cisco Certified Network Professional - Security)

-- GSEC, GCIA, or GCIH (GIAC Certifications)

-- PCNSE (Palo Alto Networks Certified Security Engineer)

#LI-MV1

#LI-Onsite

Brooks is committed to fostering a diverse and inclusive workplace and is an equal-opportunity employer. We welcome all qualified applicants regardless of race, gender, religion, or other protected characteristics. We celebrate diversity and are dedicated to creating an environment where every team member can thrive.

For accommodations, contact [e-mail] or call [phone].

Review EEO Law & EEO Statement.