Security Data Engineer: Threat Detection & Data Pipelines

Sicpa; Malaysia; In loco; MYR 180.000 - 300.000; Tempo pieno

Descrizione del lavoro

SICPA in Cyberjaya, Malaysia, seeks a Cyber Threat & Security Data Engineer to join a fast-moving SOC. The role blends operations and engineering, monitoring alerts and responding to incidents, while building data pipelines for threat detection.

You will onboard data sources, maintain data quality, work with security architects, and contribute to SOC policies. Strong English, 3+ years in SOC, and knowledge of SIEM and API data parsing are expected.

Competenze

• Minimum 3 years in SOC/CERT/CSIRT with monitoring, hunting and incident response.
• Bachelor degree in Cyber security or equivalent.
• Experience with data ingestion, log management, ETL/ELT concepts or security data pipelines.
• Understanding of data quality, normalization and schema management.
• Knowledge of APIs, JSON, data parsing and automation scripting (Python, PowerShell).
• Interest in AI-enabled and Agentic SOC operating models.
• Hands-on experience with security technologies such as firewalls, IDS/IPS, SIEM, anti-malware, web filtering, vulnerability scanning.
• Strong enterprise IT knowledge including networking, OS, cloud and SaaS services.

Mansioni

• Monitor the firm’s environment for abnormal behaviour and triage security alerts.
• Launch response measures to security incidents within the SICPA network.
• Utilize forensic tools to understand incident scope.
• Perform threat hunting across infrastructure for undetected malicious events.
• On-call duties on a scheduled basis; daytime operations only.
• Design, implement and maintain security data pipelines and data lake.

Conoscenze

SOC experience

Threat hunting

Incident response

Data ingestion

ETL/ELT

APIs/JSON

Automation scripting

Security architectures

English communication

Formazione

Bachelor degree in Cyber security

Strumenti

SIEM

Firewalls

IDS/IPS

Endpoint detection and response

Forensic tools

Descrizione del lavoro

SICPA in Cyberjaya, Malaysia, seeks a Cyber Threat & Security Data Engineer to join a fast-moving SOC. The role blends operations and engineering, monitoring alerts and responding to incidents, while building data pipelines for threat detection.

You will onboard data sources, maintain data quality, work with security architects, and contribute to SOC policies. Strong English, 3+ years in SOC, and knowledge of SIEM and API data parsing are expected.