Security Engineer - Entry / Associate Level

Ancile Solutions Sdn Bhd; Bayan Lepas; On-site; MYR 50,000 - 90,000; Full time

Job summary

Ancile Solutions is seeking a Security Engineer at entry/associate level in Penang, Malaysia. You will work with senior engineers to protect client IT and network environments, deploying NGFWs, enforcing NAC, and supporting incident response.

The role emphasizes hands-on exposure across security domains with mentorship and personal learning. As part of the technical delivery team, you will translate security strategies into practical protections, participate in vulnerability assessments, and

Qualifications

• Bachelor's degree or equivalent in cybersecurity, CS, IT, or engineering.
• 0–3 years IT support, network admin, or security experience.
• Fresh graduates with security projects or relevant internship experience encouraged.

Responsibilities

• Serve as part of the technical delivery team to translate security strategies into practical protections.
• Assist in incident escalation, containment, and remediation for security events.
• Support vulnerability assessments and contribute to VA reports with remediation steps.
• Assist ISMS documentation ownership, policies, SOPs, and risk registers upkeep.
• Coordinate audit evidence for internal and external audits and client engagements.

Skills

Networking fundamentals

Firewall & perimeter security

Identity & access control

Vulnerability assessment concepts

Threat monitoring & detection

Security governance & compliance

Analytical troubleshooting

Client-facing professionalism

Field mobility

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field

Tools

Nessus

Nmap

Job description

Security Engineer - Entry / Associate Level

As a Junior / Associate Cybersecurity Engineer, you will play an essential role in protecting our clients' IT and network environments against evolving cyber threats. Working alongside senior engineers, you will bridge the gap between network infrastructure and security—deploying Next-Generation Firewalls, enforcing network access controls, monitoring SIEM/XDR alerts, conducting vulnerability assessments, and supporting incident response.

This role is built for someone with a strong passion for cybersecurity and a proactive, self-driven mindset. You will be given real hands‑on exposure across multiple security domains, supported by mentorship from senior engineers, while taking personal ownership of your continuous learning.

Key Responsibilities

As a member of our technical delivery team, you will help translate security strategies into practical, day-to-day protection for our clients. Your responsibilities will include, but are not limited to:

1. Network Security Incident Response
   • Act as the technical escalation point for the ticketing Person-in-Charge (PIC) when network support cases exhibit suspicious or malicious characteristics.
   • Document comprehensive incident timelines, maintain clear and timely communication with clients during active investigations, and assist senior engineers in executing containment, eradication, and remediation steps.
   • Contribute to post-incident reviews and root-cause analysis (RCA) documentation to help prevent recurring security issues.
2. Firewall Deployment & Strengthening
   • Assist senior security engineers in the design, deployment, and configuration of Next-Generation Firewalls (NGFW) across diverse client environments.
   • Process and evaluate client firewall policy change requests, ensuring all new rules strictly adhere to the principle of least privilege and corporate security standards.
   • Conduct regular firewall rule-base audits to identify, remediate, or decommission shadowed, redundant, or overly permissive rules.
   • Support, and maintain enterprise Network Access Control (NAC) platforms using AAA frameworks (RADIUS/TACACS+) and 802.1X protocols to enforce secure wired and wireless network admission.
   • Troubleshoot endpoint authentication issues, manage device profiling policies, and ensure unauthorized or non-compliant devices are properly quarantined or restricted.
3. Risk and Vulnerability Assessment
   • Execute assigned risk and vulnerability assessments across client networks and systems using established security scanning and assessment tools.
   • Analyse scan findings to compile clear, actionable Vulnerability Assessment (VA) reports that prioritize risks and outline practical remediation steps for clients.
   • Execute or assist client IT teams with technical remediation actions—such as system patching, configuration hardening, or applying virtual patches—when required.
4. Governance, Compliance, and Documentation
   • Assist the owner of Information Security Management System (ISMS) documentation, ensuring that security policies, Standard Operating Procedures (SOPs), asset inventories, and risk registers are version-controlled and kept up to date.
   • Coordinate and collect technical audit evidence (such as firewall review logs, incident reports, and vulnerability scan records) to demonstrate continuous compliance during internal and external audits.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field, or equivalent experience.
• 0 to 3 years of working experience in IT support, network administration, or information security. Fresh graduates with final-year security/networking projects or relevant internship experience are strongly encouraged to apply.

Core Technical Requirements

• Networking Fundamentals: Solid grasp of core networking concepts, including the OSI model, TCP/IP, subnetting, VLANs, routing, and switching.
• Firewall & Perimeter Security: Basic understanding of firewall rules, NAT, VPNs (IPsec/SSL), and the principle of least privilege.
• Identity & Access Control: Familiarity with authentication concepts such as AAA (RADIUS/TACACS+), 802.1X port-based authentication, Active Directory/LDAP, and Multi-Factor Authentication (MFA).
• Vulnerability Assessment Concepts: Awareness of common security vulnerabilities, CVE/CVSS scoring, and how vulnerability scanning tools (e.g., Nessus, Nmap) identify network and host weaknesses.
• Threat Monitoring & Detection (SIEM/XDR): Foundational understanding of centralized log management, Security Information and Event Management (SIEM), and Extended Detection and Response (XDR) concepts—including how security telemetry from endpoints, networks, and firewalls is correlated to detect anomalies and investigate alerts.
• Security Governance & Compliance: Basic awareness of the CIA Triad (Confidentiality, Integrity, Availability) and information security frameworks.

Soft Skills & Operational Requirements

• Analytical Troubleshooting: Methodical mindset when isolating network anomalies, reading system/firewall logs, and assisting in incident escalation.
• Client-Facing Professionalism: Good interpersonal and communication skills to interact clearly with client IT teams during on-site deployments and active support escalations.
• Field Mobility: Willingness to travel to client premises for site surveys, hardware deployments, and troubleshooting as required (possessing a valid driving license and own transport is preferred).

Overview of company:

Headquartered in Penang, we work alongside you to plan and structure your IT system according to your needs and requirements.

Ancile Solutions is a prominent IT system integrator company in Malaysia that was established with a desire to help businesses transform and modernise using innovative software solutions. Since 2009, our focus has been on Network and Systems technology and incorporating it into business operations seamlessly and effectively. We strive to drive companies to success with our smart solutions.

We do not believe that one size fits all.

Overview of company:

Headquartered in Penang, we work alongside you to plan and structure your IT system according to your needs and requirements.

Ancile Solutions is a prominent IT system integrator company in Malaysia that was established with a desire to help businesses transform and modernise using innovative software solutions. Since 2009, our focus has been on Network and Systems technology and incorporating it into business operations seamlessly and effectively. We strive to drive companies to success with our smart solutions.

We do not believe that one size fits all.