Senior Security Operations Engineer (SecOps)

Randstad; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Jora Malaysia is seeking a Senior Security Operations Engineer to own security monitoring, threat detection, incident response and offensive security across a multi-cloud environment.

This hands-on role goes beyond traditional SOC, including penetration testing, Red/Purple Team exercises, PoCs, and automating responses with SOAR. You will collaborate with Engineering and Product teams and participate in on-call rotations to protect the organization.

Qualifications

• Offensive and Defensive Security expertise.

Responsibilities

• Conduct penetration testing and proactive offensive security testing across Web, API, mobile, cloud and infrastructure environments.
• Identify realistic attack paths and validate vulnerabilities beyond automated scanning.
• Perform Red Team / Purple Team / attack simulation exercises.
• Develop PoCs, scripts and exploit scenarios to demonstrate security weaknesses.
• Monitor and investigate security alerts using SIEM and log analytics platforms.
• Develop and tune detection rules to improve threat detection and reduce false positives.
• Lead end-to-end Incident Response, including investigation, containment, eradication, recovery and post-mortem.
• Translate offensive security findings and attacker techniques into practical detection, prevention and response controls.
• Develop SOAR and security automation workflows to automate repetitive response activities.
• Integrate and analyse security logs across multiple cloud and security platforms.
• Operate and optimise cloud security capabilities including WAF and native cloud security controls.
• Work closely with Engineering and Product teams on security reviews, attack vectors and secure-by-design initiatives.
• Participate in an on-call rotation for critical security incidents.

Skills

SOC

SecOps

Cloud

VAPT

Red Team

DFIR

Education

Bachelor Degree

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Senior Security Operations Engineer (SecOps)

About the company

A fast-growing technology company with a strong focus on innovation, digital platforms and cloud technologies. The organisation is expanding its cybersecurity capabilities and is looking for a hands-on security professional to strengthen its Security Operations and Offensive Security functions.

About the job

We are looking for a Senior Security Operations Engineer / Security Architect to take ownership of security monitoring, threat detection, incident response and offensive security across a multi-cloud environment.

This is a hands-on technical role that goes beyond traditional SOC operations. You will conduct penetration testing, attack simulation and vulnerability exploitation while also strengthening detection capabilities and translating real-world attack techniques into effective defensive controls.

Key responsibilities

• Conduct penetration testing and proactive offensive security testing across Web, API, mobile, cloud and infrastructure environments
• Identify realistic attack paths and validate vulnerabilities beyond automated scanning
• Perform Red Team / Purple Team / attack simulation exercises
• Develop PoCs, scripts and exploit scenarios to demonstrate security weaknesses
• Monitor and investigate security alerts using SIEM and log analytics platforms
• Develop and tune detection rules to improve threat detection and reduce false positives
• Lead end-to-end Incident Response, including investigation, containment, eradication, recovery and post-mortem
• Translate offensive security findings and attacker techniques into practical detection, prevention and response controls
• Develop SOAR and security automation workflows to automate repetitive response activities
• Integrate and analyse security logs across multiple cloud and security platforms
• Operate and optimise cloud security capabilities including WAF and native cloud security controls
• Work closely with Engineering and Product teams on security reviews, attack vectors and secure-by-design initiatives
• Participate in an on-call rotation for critical security incidents

Job Details

About the company

A fast-growing technology company with a strong focus on innovation, digital platforms and cloud technologies. The organisation is expanding its cybersecurity capabilities and is looking for a hands-on security professional to strengthen its Security Operations and Offensive Security functions.

About the job

We are looking for a Senior Security Operations Engineer / Security Architect to take ownership of security monitoring, threat detection, incident response and offensive security across a multi-cloud environment.

This is a hands-on technical role that goes beyond traditional SOC operations. You will conduct penetration testing, attack simulation and vulnerability exploitation while also strengthening detection capabilities and translating real-world attack techniques into effective defensive controls.

Key responsibilities

• Conduct penetration testing and proactive offensive security testing across Web, API, mobile, cloud and infrastructure environments
• Identify realistic attack paths and validate vulnerabilities beyond automated scanning
• Perform Red Team / Purple Team / attack simulation exercises
• Develop PoCs, scripts and exploit scenarios to demonstrate security weaknesses
• Monitor and investigate security alerts using SIEM and log analytics platforms
• Develop and tune detection rules to improve threat detection and reduce false positives
• Lead end-to-end Incident Response, including investigation, containment, eradication, recovery and post-mortem
• Translate offensive security findings and attacker techniques into practical detection, prevention and response controls
• Develop SOAR and security automation workflows to automate repetitive response activities
• Integrate and analyse security logs across multiple cloud and security platforms
• Operate and optimise cloud security capabilities including WAF and native cloud security controls
• Work closely with Engineering and Product teams on security reviews, attack vectors and secure-by-design initiatives
• Participate in an on-call rotation for critical security incidents

Skills

SOC, SecOps, Cloud, VAPT, Red Team, DFIR,

Qualification

Offensive and Defensive Security Expertise

Education

Bachelor Degree