Security Engineer

Mesiniaga Berhad; Subang Jaya; On-site; MYR 120,000 - 200,000; Full time

Job summary

Mesiniaga Berhad in Malaysia is seeking a senior cybersecurity professional to manage daily security operations, incidents, and ISO 27001 ISMS maintenance. You will assess risks, strengthen controls, and collaborate with IT, auditors, and partners.

The role requires at least 5 years of cybersecurity experience and hands-on expertise with Entra ID, endpoint security, SIEM, EDR, and security operations, along with relevant certifications and strong English/Bahasa communication skills.

Qualifications

• At least 5 years of cybersecurity experience.
• Hands-on experience with Entra ID, endpoint security, SIEM, EDR and security operations.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or Security+ are a plus.
• Excellent communication and presentation skills.
• Proficient in English and Bahasa (both written and verbal).

Responsibilities

• Manage cybersecurity every day across company systems.
• Handle security incidents—investigate, contain, fix, and prevent recurrence.
• Find and fix security weaknesses across systems and applications.
• Manage security policies and compliance, ISMS ISO 27001.
• Work with ISO 27001: prepare for audits, maintain documentation, and ensure controls are effective.
• Assess security risks and recommend mitigations.
• Collaborate with IT, management, auditors, and external security vendors.
• Improve security systems and processes.
• Educate employees through cybersecurity awareness training.
• Guide junior security staff in developing skills.

Skills

Entra ID

Endpoint security

SIEM

EDR

Security operations

ISO 27001

CISSP

CISM

ISO 27001 Lead Implementer/Auditor

Security+

English

Bahasa

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Manage cybersecurity every day
Keep the company's computers, servers, cloud systems, networks, Microsoft 365, and employee devices secure.

Handle security incidents
When something suspicious happens—such as malware, phishing, a compromised account, or a data breach—you investigate what happened, contain the problem, fix it, and make sure it doesn't happen again.

Find and fix security weaknesses
Regularly look for vulnerabilities in systems and applications, monitor security alerts, and make sure important security risks are addressed.

Manage security policies and compliance
Create and maintain cybersecurity policies, standards, and procedures, and make sure the company follows them.

Work with ISO 27001
Help maintain the company'sISO 27001 Information Security Management System (ISMS), prepare for audits, maintain required documentation, and make sure security controls are working.

Assess security risks
Look at potential threats and weaknesses, decide how serious they are, and recommend ways to reduce the risk.

Work with different teams
You'll communicate with IT, management/business teams, auditors, and outside security vendors or partners.

Improve security systems and processes
Review how the company currently protects its systems and suggest better ways to design, configure, and operate them.

Teach employees about security
Help run cybersecurity awareness programs, such as phishing training, security briefings, and employee education.

Guide junior security staff
Help less-experienced security engineers develop their technical skills and handle security tasks.

Requirements

Someone withat least 5 years of cybersecurity experience, preferably someone who has workedinside a companyrather than mainly works for a consulting company or system integrator.

Possess hands-on experience with:

Entra ID— Microsoft's identity and access management system (formerly Azure AD)

Endpoint security— protecting laptops, desktops, and other employee devices

SIEM— collecting and analyzing security logs and alerts

EDR— detecting and responding to threats on computers

Security operations— monitoring and responding to security threat

ISO 27001— implementing controls and preparing for auditsCertifications such asCISSP, CISM, ISO 27001 Lead Implementer/Auditor, or Security+are a plus.

Excellent communication and presentation skills.

Strong problem-solving skills and attention to detail.

Proficient in English and Bahasa (both written and verbal).