Senior SecOps & Offensive Security Engineer

Randstad; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Jora Malaysia is seeking a Senior Security Operations Engineer to own security monitoring, threat detection, incident response and offensive security across a multi-cloud environment.

This hands-on role goes beyond traditional SOC, including penetration testing, Red/Purple Team exercises, PoCs, and automating responses with SOAR. You will collaborate with Engineering and Product teams and participate in on-call rotations to protect the organization.

Qualifications

• Offensive and Defensive Security expertise.

Responsibilities

• Conduct penetration testing and proactive offensive security testing across Web, API, mobile, cloud and infrastructure environments.
• Identify realistic attack paths and validate vulnerabilities beyond automated scanning.
• Perform Red Team / Purple Team / attack simulation exercises.
• Develop PoCs, scripts and exploit scenarios to demonstrate security weaknesses.
• Monitor and investigate security alerts using SIEM and log analytics platforms.
• Develop and tune detection rules to improve threat detection and reduce false positives.
• Lead end-to-end Incident Response, including investigation, containment, eradication, recovery and post-mortem.
• Translate offensive security findings and attacker techniques into practical detection, prevention and response controls.
• Develop SOAR and security automation workflows to automate repetitive response activities.
• Integrate and analyse security logs across multiple cloud and security platforms.
• Operate and optimise cloud security capabilities including WAF and native cloud security controls.
• Work closely with Engineering and Product teams on security reviews, attack vectors and secure-by-design initiatives.
• Participate in an on-call rotation for critical security incidents.

Skills

SOC

SecOps

Cloud

VAPT

Red Team

DFIR

Education

Bachelor Degree

Job description

Jora Malaysia is seeking a Senior Security Operations Engineer to own security monitoring, threat detection, incident response and offensive security across a multi-cloud environment.

This hands-on role goes beyond traditional SOC, including penetration testing, Red/Purple Team exercises, PoCs, and automating responses with SOAR. You will collaborate with Engineering and Product teams and participate in on-call rotations to protect the organization.