Security Engineer (Mid Level)

Ancile Solutions Sdn Bhd; Bayan Lepas; On-site; MYR 120,000 - 180,000; Full time

Job summary

Ancile Solutions Sdn Bhd in Penang invites a Cybersecurity Engineer to join our dedicated security team. You will own security assessments, incident handling, and secure enterprise IT environments for our clients, translating requirements into practical controls.

You will work on firewall and VPN deployments, SIEM/XDR, vulnerability management, and ISO 27001/ISO 9001 compliance. A strong foundation in enterprise networking and a proactive problem-solving mindset are essential.

Qualifications

• Bachelors degree in Cybersecurity, Computer Science, IT, Engineering, or related field, or equivalent experience.
• 3 to 6 years of hands-on experience in network administration, IT infrastructure support, or information security.
• Strong foundation in enterprise networking (OSI model, TCP/IP, VLANs) and security controls.
• Experience deploying, auditing, and hardening firewalls, VPNs, and network segmentation.
• Knowledge of SIEM/XDR, centralized log management, and incident response processes.
• Understanding ISO 27001/ISO 9001, NIST CSF, or CIS Benchmarks is a plus.

Responsibilities

• Act as a key escalation point for security incidents and investigations.
• Plan deployments, migrations, and upgrades of perimeter and network security infrastructures.
• Implement authentication controls and enforce least-privilege access across wired and wireless networks.
• Lead vulnerability assessments and translate findings into remediation plans.
• Support ISO 27001/ISO 9001 compliance and maintain ISMS documentation.

Skills

Networking proficiency

Perimeter security

SIEM/XDR

Identity & Access

Vulnerability management

Security governance

Education

Bachelor's degree in Cybersecurity / related field

Job description

As a Cybersecurity Engineer, you will serve as a core technical member of our Cybersecurity team, responsible for delivering, optimizing, and securing enterprise IT environments for our clients. At this level, you will take ownership of assigned projects, security assessments, and escalated incidents while collaborating closely with team leads and fellow engineers on complex initiatives. Combining independent execution with strong teamwork, you will translate security requirements into practical implementations, resolve operational challenges, and uphold our internal security governance standards. We are looking for a self-driven, resourceful engineer with a strong passion for continuous learning who takes pride in solving unfamiliar technical challenges and contributing to the team's collective success.

Key Responsibilities

As a key contributor within the engineering team, you will manage technical deliverables reliably, collaborate on larger deployments, and serve as a dependable escalation point. Your core responsibilities include:

1. Security Incident Investigation & Escalation Support

-Act as a key technical escalation point for the support desk and junior engineers, investigating escalated security cases and working alongside senior leads to execute containment and remediation.

-Correlate and analyse security telemetry across centralized monitoring platforms to identify attack patterns, isolate affected systems, and filter out false positives.

-Maintain clear, timely communication with clients and internal stakeholders during active investigations, and contribute to comprehensive Root-Cause Analysis (RCA) reports.

2. Security Solution Delivery & Policy Governance

-Plan and execute deployments, migrations, and upgrades of perimeter and network security infrastructures, working either independently on standard rollouts or as a core contributor on large-scale team projects.

-Evaluate and implement security policy change requests, ensuring all configurations strictly enforce the principle of least privilege and network segmentation without disrupting business operations.

-Conduct regular security configuration audits and system health checks to optimize performance and remediate shadowed, redundant, or overly permissive access rules.

3. Network Access & Identity Enforcement

-Implement, administer, and optimize enterprise network admission and centralized authentication controls across wired and wireless client infrastructures.

-Troubleshoot and resolve multi-layered authentication, authorization, and endpoint compliance issues to ensure only verified users and devices gain network access.

4. Risk and Vulnerability Management

-Plan and execute vulnerability and risk assessments across client networks and systems, taking ownership of the process from scanning through to analysis.

-Translate raw assessment findings into prioritized, client-ready remediation reports, validating true risk and eliminating false positives.

-Collaborate with client IT teams and fellow engineers to execute technical remediation—such as configuration hardening, virtual patching, or system updates—and verify post-remediation.

5. Compliance Operations & Team Collaboration

-Work with the team to implement and maintain the technical security controls, operational baselines, and logging standards required for internal ISO 27001 & ISO 9001 compliance.

-Maintain and keep Information Security Management System (ISMS) operational procedures, risk registers, and audit evidence accurate and up to date.

-Share technical knowledge across the team, refine internal Standard Operating Procedures (SOPs), and guide entry-level engineers during field deployments and daily troubleshooting.

Required Qualifications

-Education: Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field, or equivalent experience.

Experience: 3 to 6 years of hands-on working experience in network administration, IT infrastructure support, or information security. Candidates with a strong foundation in enterprise networking who are actively transitioning into cybersecurity are strongly encouraged to apply.

Core Technical Requirements

-Enterprise Networking & Traffic Analysis: Strong hands-on proficiency in core networking—including the OSI model, TCP/IP, VLANs, routing, switching, NAT, and packet-level troubleshooting to isolate network and security anomalies.

-Perimeter & Network Security Controls: Practical experience deploying, administering, and auditing enterprise firewalls, VPNs, network segmentation, and intrusion prevention policies in line with least-privilege principles.

-Threat Monitoring & Detection (SIEM/XDR): Working knowledge of centralized log management, SIEM, and XDR platforms—including how security telemetry from endpoints, servers, and networks is correlated to investigate alerts and validate threats.

-Identity & Network Access Enforcement: Practical familiarity with centralized authentication frameworks, directory services integration, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) solutions.

-Vulnerability Assessment & Hardening: Hands-on familiarity with vulnerability scanning tools, risk prioritization scoring, and executing technical remediation such as configuration hardening, patching, or compensating controls.

-Security Governance & Compliance: Practical working knowledge of major information security frameworks and standards—such as ISO 27001 & ISO 9001, the NIST Cybersecurity Framework (CSF), or CIS Benchmarks—and how to translate high-level security controls into daily technical operations.

Telecommunications & Internet Service Providers 11-50 employees

Overview of company:

Headquartered in Penang, we work alongside you to plan and structure your IT system according to your needs and requirements.

Ancile Solutions is a prominent IT system integrator company in Malaysia that was established with a desire to help businesses transform and modernise using innovative software solutions. Since 2009, our focus has been on Network and Systems technology and incorporating it into business operations seamlessly and effectively. We strive to drive companies to success with our smart solutions.

We do not believe that one size fits all.

Overview of company:

Headquartered in Penang, we work alongside you to plan and structure your IT system according to your needs and requirements.

Ancile Solutions is a prominent IT system integrator company in Malaysia that was established with a desire to help businesses transform and modernise using innovative software solutions. Since 2009, our focus has been on Network and Systems technology and incorporating it into business operations seamlessly and effectively. We strive to drive companies to success with our smart solutions.

We do not believe that one size fits all.