Senior IT Security Engineer

Pixlr; Selangor; On-site; MYR 80,000 - 120,000; Full time

Job summary

A digital asset management company is seeking a skilled Senior IT Security Engineer to protect their information systems. This role involves implementing security solutions, conducting vulnerability assessments, and collaborating with IT teams. The ideal candidate will have a Bachelor's in a relevant field, at least 3 years of IT security experience, and expertise in AWS and cybersecurity tools. Benefits include annual leave, medical coverage, and a diverse work environment.

Benefits

Annual Leaves

Medical and Insurance Coverages

Optical and dental subsidies

Opportunities for personal growth

Diverse work environment

Qualifications

• At least 3 years of working experience in IT security.
• In-depth knowledge of cybersecurity principles, technologies, and best practices.
• Experience with Cloud and virtualized technology in environments such as AWS.

Responsibilities

• Implement and maintain advanced security solutions across IT infrastructure.
• Conduct regular vulnerability assessments and penetration testing.
• Monitor security alerts and respond to incidents.
• Perform detailed technical risk assessments.
• Contribute to security automation and orchestration.

Skills

Technical expertise in cybersecurity

Experience with security tools

AWS security auditing

Knowledge of authentication protocols

Excellent communication skills

Education

Bachelor's Degree in CyberSecurity / Information Technology / Computer Science

Tools

Burp Suite

Nuclei

Job description

We are seeking an experienced and skilled Senior IT Security Engineer to play a crucial role in safeguarding our organization's information systems and ensuring the confidentiality, integrity, and availability of our digital assets. If you possess strong technical expertise in cybersecurity, hands-on experience with security tools and technologies, and a proven track record of implementing effective security measures, we want to hear from you!

Job

• Security Implementation and Maintenance:
  • Implement and maintain advanced security solutions and controls across our IT infrastructure.
  • Configure, tune, and manage security tools.
• Vulnerability Management:
  • Conduct regular vulnerability assessments and penetration testing to identify security weaknesses.
  • Develop and implement remediation plans to address discovered vulnerabilities.
• Security Monitoring and Incident Response:
  • Monitor security alerts and events, analyze potential threats, and respond to security incidents.
  • Play a key role in the incident response team, helping to investigate and mitigate security breaches.
• Risk Assessment:
  • Perform detailed technical risk assessments on systems, applications, and network infrastructure.
  • Recommend and implement appropriate security controls to mitigate identified risks.
• Security Architecture:
  • Contribute to the design and implementation of secure IT architectures.
  • Collaborate with development and operations teams to integrate security measures into systems and applications.
• Compliance and Policy Implementation:
  • Implement and enforce security policies and procedures to ensure compliance with relevant standards and regulations.
  • Assist in preparing for and supporting security audits.
• Security Automation:
  • Develop and maintain scripts and tools to automate security processes and improve efficiency.
  • Implement security orchestration and automated response (SOAR) capabilities.
• Threat Intelligence:
  • Stay informed about the latest security threats, vulnerabilities, and mitigation techniques.
  • Apply threat intelligence to enhance the organization's security posture.
• Documentation and Reporting:
  • Maintain detailed documentation of security configurations, incidents, and processes.
  • Prepare technical reports on security status, incidents, and recommendations for leadership.
• Collaboration and Knowledge Sharing:
  • Work closely with other IT teams to ensure security is integrated into all aspects of IT operations.
  • Contribute to security awareness efforts by providing technical expertise and guidance to colleagues.

Qualifications

• Bachelor's Degree in CyberSecurity / Information Technology / Computer Science or related field.
• At least 3 years of working experience in IT security.
• In-depth knowledge of cybersecurity principles, technologies, and best practices.
• Vast experience with Cloud and virtualized technology in environments such as AWS.
• Proven track record of AWS security auditing.
• Proven track record of developing and implementing security policy.
• Experience with penetration testing tools such as Burp Suite, Nuclei and other open source tools.
• Deep understanding of authentication protocols and frameworks to include OAuth and AWS IAM.
• Knowledge of the latest industry trends and best practices in information security.
• Experience in bug bounty programs, CTFs and/or having InfoSec certifications (OSCP, OSWE, Security+ or other technical certifications relating to security testing) will be an added advantage.
• Excellent communication skills.
• Ability to collaborate effectively with cross-functional teams and external partners.
• Demonstrated ability to manage complex projects and initiatives.

Benefits

• Annual Leaves- Additional annual leave will be credited to you on a yearly basis.
• Medical and Insurance Coverages - We have got you covered.
• Subsidies- Enhancing your well-being, we offer optical and dental subsidies
• Opportunities- Above training and guidance, you will have the opportunity to try, to build your confidence and become your best self, and to interact and build a strong relationship.
• Rocking Diversity- Play hard, work harder with people of diverse skill sets and experiences! Challenge yourself to step out of your comfort zone, and you\'ll find yourself growing in a way you\'d never imagine.