Security Specialist

Razer Merchant Services Sdn. Bhd.; Shah Alam; On-site; MYR 120,000 - 180,000; Full time

Job summary

Razer Merchant Services Sdn. Bhd. in Selangor seeks a Senior Information Security Specialist to strengthen cybersecurity and lead key initiatives. The role requires deep technical expertise, leadership, and collaboration with IT, DevOps, Cloud, Risk, and Compliance teams. On-site work at i-City Shah Alam is expected.

You will conduct advanced penetration testing, manage vulnerabilities, respond to incidents, and guide security strategy across the organization to protect critical assets.

Qualifications

• Bachelor’s degree or higher in Computer Science, Information Security, IT, or related field.
• Minimum 5 years hands‑on experience in cybersecurity, ethical hacking, penetration testing, or information security.
• Industry certifications such as Security+, CEH, OSCP, eJPT, eWPT, GIAC or similar are highly advantageous.
• For senior or lead roles: demonstrated leadership capability—team guidance, project ownership, and cross‑functional influence.
• Proficiency with offensive and defensive security tools such as Burp Suite, Metasploit, Nessus, Qualys, Splunk, SIEM platforms.
• Strong technical understanding of network protocols, web application security (OWASP Top 10), vulnerability analysis, and threat detection methodologies.
• Hands‑on experience with AWS Cloud security controls (IAM, networking) and Linux system administration.
• Strong analytical and problem solving skills, with the ability to operate independently and collaboratively.
• Strong communication and reporting skills, with the ability to articulate complex risks to non‑technical stakeholders.
• Willingness to work on‑site in i‑City Shah Alam.

Responsibilities

• Strengthen cybersecurity posture and lead critical security initiatives.
• Drive identification and remediation of complex vulnerabilities; lead incident response.
• Shape security strategies; enhance defensive capabilities and resilience of systems.
• Influence security practices across the organization; act as escalation point for incidents.
• Lead vulnerability assessments across networks, apps, and infra with risk-based guidance.
• Plan and conduct advanced penetration testing (network, app, cloud, infra) and report findings.
• Review and optimize security controls, firewall rules, network segmentation, and endpoints.
• Collaborate with IT, DevOps, Cloud, Risk and Compliance to embed security in SDLC.
• Engage with business units as trusted security advisor; drive security awareness.

Skills

Cybersecurity

Penetration Testing

Incident Response

Vulnerability Assessment

Threat Intelligence

AWS Security

Linux

Security Tools

Communication

Education

Bachelor's Degree in Computer Science / Information Security

Postgraduate Diploma

Professional Qualification

Tools

Burp Suite

Metasploit

Nessus

Qualys

Splunk

SIEM

Job description

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.

Job Responsibilities

• We are seeking an experienced and highly analytical Senior Information Security Specialist to strengthen our cybersecurity posture and lead critical security initiatives.
• In this senior role, you will drive the identification and remediation of complex vulnerabilities, lead incident response efforts, and provide expert guidance to technical and business stakeholders.
• You will play a key role in shaping security strategies, enhancing our defensive capabilities, and ensuring the resilience of our systems against evolving threats.
• This position requires strong technical depth, proactive leadership, and the ability to influence security practices across the organization.
• Lead vulnerability assessments across networks, applications, and infrastructure, delivering clear, actionable remediation guidance to technical and non‑technical stakeholders.
• Plan and conduct advanced penetration testing (network, application, cloud, and infrastructure), producing high‑quality reports with prioritized risk‑based recommendations.
• Review, refine, and optimize security controls, including firewall rulesets, network segmentation, and endpoint configurations to ensure continuous hardening of the environment.
• Monitor, analyze, and respond to complex security alerts and incidents, ensuring timely triage, containment, eradication, and detailed root cause analysis.
• Act as an escalation point for incident investigations, coordinating cross‑functional response efforts and ensuring lessons learned are captured and implemented.
• Review, validate, and prioritize bug bounty submissions, working collaboratively with security researchers and internal engineering teams to remediate identified vulnerabilities.
• Collaborate with IT, DevOps, Cloud, Risk and Compliance teams to embed security best practices throughout the system development lifecycle and operational processes.
• Engage with business units as a trusted security advisor, providing expert guidance, risk assessments, and recommendations to support secure business decisions.
• Champion and drive security awareness initiatives, fostering strong security culture and improving organization‑wide security maturity.
• Contribute to security strategy, standards, and continuous improvement, leveraging threat intelligence, emerging trends, and lessons learned.
• Perform additional duties as assigned by the Team Lead or Manager to support departmental goals.

Additional Job Description

• Bachelor’s Degree, Postgraduate Diploma, or Professional Qualification in Computer Science, Information Security, IT, or a related field. Equivalent practical experience will be considered.
• Minimum 5 years hands‑on experience in cybersecurity, ethical hacking, penetration testing, or information security.
• Industry certifications such as Security+, CEH, OSCP, eJPT, eWPT, GIAC or similar are highly advantageous.
• For senior or lead roles: demonstrated leadership capability—team guidance, project ownership, and cross‑functional influence.
• Proficiency with offensive and defensive security tools such as Burp Suite, Metasploit, Nessus, Qualys, Splunk, SIEM platforms, and other industry‑standard toolsets.
• Strong technical understanding of network protocols, web application security (OWASP Top 10), vulnerability analysis, and threat detection methodologies.
• Hands‑on experience with AWS Cloud services (security controls, IAM, networking) and Linux system administration is essential.
• Strong analytical and problem solving skills, with the ability to operate independently and collaboratively in a fast‑paced environment.
• Strong communication and reporting skills, with the ability to articulate complex technical risks to non‑technical stakeholders.
• Willingness to work on‑site in i‑City Shah Alam.

Pre‑Requisites

Razer is proud to be an Equal Opportunity Employer. We believe that diverse teams drive better ideas, better products, and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee across all the countries we operate in. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected under local laws. Where needed, we provide reasonable accommodations - including for disability or religious practices - to ensure every team member can perform and contribute at their best.

About Razer

Are you game? At Razer, you’ll be at the forefront of the most exciting industry in the world: gaming. As gaming evolves, so does the ecosystem that powers it: hardware, software and services. Guided by our mission "For Gamers. By Gamers." , we create cutting‑edge products and experiences that define the ultimate gameplay. Staying true to our mission, we’re relentlessly pushing boundaries and leading the charge in AI for gaming, shaping the future of the industry. At Razer, you won’t just witness this evolution; you’ll help drive it. Joining Razer means being part of a global mission to bring gamers closer to the games they love. Whether you’re crafting the next generation of gaming gear or powering our global operations behind the scenes, you’ll take on meaningful work in a truly international, cross‑cultural environment. The journey toward Being Phenomenal isn’t always easy, but gamers excel through teamwork, grit, and problem‑solving. Our people are what make Razer exceptional. Together, we’ll take Razer to even greater heights. Razer is proud to be certified a GreatPlace to Work® in both the United States and Singapore, and recognized as a Singapore Top Employer by the Top Employer Institute, reflecting our commitment to making your journey here a rewarding one.

Equal Opportunity Employer

At Razer, we believe diverse teams build better ideas and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected by the laws of the countries we operate in. We also provide reasonable accommodations where needed —including for disability or religious practices — so every team member can perform and contribute at their best.