Security Engineer

HFM; Kuala Lumpur; Hybride; MYR 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Hybrid Work Model (2 days WFH)

Comprehensive Health Insurance (from:

21 days Annual Leave

Birthday Leave

Referral Bonus Program

Résumé du poste

HFM in Kuala Lumpur, Malaysia is seeking a Mid Security Engineer to join our team. You will monitor, protect, and optimize security across endpoints, servers, networks, and cloud environments.

You will develop detection rules, respond to incidents, and coordinate with Infrastructure, DevOps, and IT to ensure compliance with ISO 27001 and other standards. Proficiency in Windows, Linux, Active Directory, and scripting is required.

Qualifications

• Minimum of 4 years hands-on experience in a security role.
• Strong knowledge of cybersecurity principles, threat detection, and incident response.
• Hands-on experience implementing, managing, and troubleshooting enterprise security solutions.
• Experience with EDR, Antivirus, HIPS, SIEM, and DLP.

Responsabilités

• Monitor, maintain, and optimize security solutions to detect, investigate, and prevent unauthorized activities and emerging threats.
• Evaluate, deploy, configure, and manage security technologies including EDR, SIEM, DLP, email security, and threat prevention.
• Investigate security alerts and incidents, perform root cause analysis, and improve incident response procedures.
• Monitor emerging threats, vulnerabilities, attack techniques, and security technologies, identifying weaknesses and mitigating.
• Implement security controls across endpoints, servers, networks, and cloud environments, following best practices.
• Develop and optimize security policies, detection rules, and automated responses to enhance threat visibility and reduce false positives.
• Support network segmentation, zero-trust architecture, endpoint hardening, vulnerability management, security automation, and information security strategy development.
• Resolve security-related technical issues in collaboration with Infrastructure, Network, DevOps, Cloud, and IT teams; support ISO 27001, DORA, GDPR where applicable.

Connaissances

Cybersecurity fundamentals

Threat detection

Incident response

Windows OS

Active Directory

Linux

Python

PowerShell

Bash

Outils

EDR

SIEM

DLP

HIPS

Description du poste

Kuala Lumpur, Malaysia | Posted on 02/11/2026

• Country Malaysia
• Postal Code 58000

Job Description

AboutUs

HFM is aninternationally acclaimed multi-asset broker, deliveringcutting-edge trading tools, platforms, and conditions totraders worldwide. We are committed to innovation,transparency, and excellence in the financial markets.

As wecontinue to expand, we are seeking a driven and strategic Mid Security Engineer tojoin our team.

Responsibilities :

• Monitor, maintain, and optimize security solutions to detect, investigate, and prevent unauthorized activities and emerging threats.
• Evaluate, deploy, configure, and manage security technologies, including EDR, SIEM, DLP, email security, and threat prevention solutions.
• Investigate security alerts and incidents, perform root cause analysis, and improve incident response procedures.
• Monitor emerging threats, vulnerabilities, attack techniques, and security technologies, identifying weaknesses and recommending mitigations.
• Implement security controls across endpoints, servers, networks, and cloud environments, following security standards and best practices.
• Develop and optimize security policies, detection rules, and automated responses to enhance threat visibility and reduce false positives.
• Support network segmentation, zero-trust architecture, endpoint hardening, vulnerability management, security automation, and information security strategy development.
• Resolve security-related technical issues by collaborating with Infrastructure, Network, DevOps, Cloud, and IT teams, and support compliance with ISO 27001, DORA, GDPR, and CySEC, where applicable.

Requirements

Required Skills & Experience :

• Minimum of 4 years of hands‑on experience in similar role.
• Strong knowledge of cybersecurity principles, security architectures, threat detection, and incident response.
• Hands‑on experience implementing, managing, and troubleshooting enterprise security solutions.
• Experience with Endpoint Detection and Response (EDR), Antivirus, HIPS, SIEM, and Data Loss Prevention (DLP).

Must Have:

• Hands‑on experience investigating security incidents, analyzing alerts, identifying threats, and coordinating remediation activities.
• Experience developing security rules, detection policies, and prevention mechanisms, with knowledge of MITRE ATT&CK, LoLBins, ransomware, brute‑force attacks, and password spraying.
• Experience in malware investigation, troubleshooting, and security assessments.
• Strong knowledge of Windows, Active Directory, and Linux, with familiarity in Python, Bash, or PowerShell for security automation.

Nice to Have:

• Hands‑on experience securing cloud environments, particularly AWS, Azure, or Google Cloud.
• Knowledge of cloud security architectures, identity management, network security, and cloud‑native security services.
• Experience with SOAR platforms, security automation, and automated incident response playbooks.
• Relevant cybersecurity certifications, including OSCP, OSCP+, SANS GIAC (GCIH, GCIA, GCFA), CEH, or CompTIA Security+.
• Cloud security certifications such as AWS Certified Security – Specialty or CCSP.
• Experience in financial services or other highly regulated, security-sensitive environments.

Resumesmust be submitted in English.

Applicantsmust be eligible or have legalauthorization to work in the countrywhere the position is based.

• HybridWork Model (2 days working from home)
  
• ComprehensiveHealth Insurance (from day one!)
  
• 21days of Annual Leave
  
• BirthdayLeave
  
• ReferralBonus Program
  

Additional Support

• VisaSponsorship and Relocation Assistance (If applicable)

All Applications will be handled with the strictestconfidentiality.