Security Engineer - Cloud, Apps & Vulnerability Management

BrioHR Pte Ltd; Malaysia; On-site; MYR 120,000 - 240,000; Full time

Job summary

Nexus Global Operator in Malaysia seeks an experienced security engineer to own and continuously improve security controls across cloud, infrastructure and applications. You will drive secure-by-design practices and coordinate with engineering teams to reduce cyber risk.

You will lead vulnerability management, work with SOC/MSSP partners on detection and incident response, and provide clear technical risk insights to technology leadership, with evidence of controls operating effectively.

Qualifications

• 8+ years of experience across cyber security, information security or security engineering.
• Hands-on experience across security architecture, cloud security, application security, vulnerability management and cyber defence.
• Experience with SOC or MSSP services and responding to significant security events.

Responsibilities

• Design and continuously improve security controls across cloud, infrastructure and application environments.
• Drive security reviews for technology projects, integrations, architecture changes and production releases.
• Own vulnerability identification, prioritisation and remediation tracking, validating that material weaknesses are addressed.
• Work with SOC and MSSP partners to investigate security events, improve detection capabilities and coordinate technical incident response.
• Coordinate penetration testing and technical security assessments, translating findings into practical remediation actions.

Skills

Security architecture

Cloud security

Application security

Vulnerability management

Cyber defence

Stakeholder communication

Job description

Nexus Global Operator in Malaysia seeks an experienced security engineer to own and continuously improve security controls across cloud, infrastructure and applications. You will drive secure-by-design practices and coordinate with engineering teams to reduce cyber risk.

You will lead vulnerability management, work with SOC/MSSP partners on detection and incident response, and provide clear technical risk insights to technology leadership, with evidence of controls operating effectively.