Security Operations Lead: Hands-On Incident Response Tuning

Randstad Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Randstad Malaysia is seeking a hands-on Senior Security Engineer to maintain enterprise security controls across endpoint, identity, data, network, and email in a Malaysian on-site role. Based in Simpang Ampat, Penang, or Pasir Gudang, Johor, you will respond to live alerts, drive investigations end-to-end, tune detections, and develop runbooks with the security team.

You should have 7–10+ years of security engineering/SecOps experience, strong knowledge of CrowdStrike, Intune/Entra, Palo Alto,

Qualifications

• 7–10+ years hands-on experience in security engineering or SecOps.
• Strong knowledge of endpoint, identity, network, email, DNS, and cloud security controls.
• Experience operating and troubleshooting security platforms.
• Ability to develop incident response runbooks and escalation paths.

Responsibilities

• Manage and validate security controls continuously, overseeing systems such as CrowdStrike Falcon, Microsoft Intune/Entra ID/Conditional Access, Sumo Logic, Palo Alto firewalls, Cisco Email Security (DMARC/DKIM/SPF), Cisco Umbrella, and HP Aruba Clearpass.
• Design, implement, and maintain network security policies, email posture, and DNS-layer visibility.
• Develop, maintain, and standardize incident response runbooks, playbooks, and escalation paths.
• Partner across identity and infrastructure teams to integrate security into architectural designs, while mentoring junior engineers.

Skills

Security engineering

Incident response

Threat detection tuning

Endpoint security

Cloud security

Network security

Education

Bachelor Degree

Tools

CrowdStrike Falcon

Microsoft Intune/Entra ID

Palo Alto

Cisco Email Security

Cisco Umbrella

HP Aruba Clearpass

Job description

Randstad Malaysia is seeking a hands-on Senior Security Engineer to maintain enterprise security controls across endpoint, identity, data, network, and email in a Malaysian on-site role. Based in Simpang Ampat, Penang, or Pasir Gudang, Johor, you will respond to live alerts, drive investigations end-to-end, tune detections, and develop runbooks with the security team.

You should have 7–10+ years of security engineering/SecOps experience, strong knowledge of CrowdStrike, Intune/Entra, Palo Alto,