System Engineer - Networking & Security Patching

Ascendion; Cyberjaya; On-site; MYR 67,000 - 134,000; Full time

Job summary

Ascendion seeks a System Engineer to support project teams by identifying and resolving security issues that could affect milestones. You will implement practical, risk-based solutions and work with stakeholders to balance security with project timelines.

The role requires comprehensive network and OS knowledge, and hands-on experience with security controls across UNIX, Windows, and multi-platform environments. A strong focus on regulatory standards and incident response is essential.

Qualifications

• Strong understanding of networks and operating systems (Linux/Windows).
• Knowledge of information security principles (least privilege, defense in depth).
• Experience with information security risk analysis and periodic information system activity reviews.
• Multi-platform experience (UNIX, Windows, Linux) and security environments including firewalls, IDS, incident response, policy writing, vulnerability testing, hardening, compliance, and data classification.
• Experience architecting and implementing security solutions, policies, and technologies for transactional web sites.
• Familiarity with PCI-DSS, ISO27001, NIST, and related standards.
• Ability to monitor and adapt to new information security technologies (e.g., Imperva WAF, VPN, End Point Security, web proxy).

Responsibilities

• Collaborate with project teams to support achievement of project milestones by resolving security-related technical challenges.
• Identify, analyze, and remediate security issues that arise during project execution.
• Develop and implement practical, risk-based solutions to unblock project activities impacted by security constraints.
• Work closely with stakeholders to balance security requirements with operational and project needs.
• Troubleshoot and resolve technical issues related to networks and systems.
• Maintain and enhance security processes, procedures, standards, guidance, and documentation to reflect changes in the IT environment.

Skills

Networking

OS knowledge

Info security basics

UNIX

Windows

Firewalls

Intrusion detection

Incident response

Vulnerability testing

Regulatory compliance

Data classification

PCI-DSS

ISO27001

NIST

WAF

VPN

Tools

Imperva WAF

VPN

Web proxy

Job description

• The system engineer plays a critical role in supporting project teams to achieve key milestones by identifying and resolving technical security issues that may impede progress.
• This role requires a pragmatic and solution-oriented approach to ensure that security concerns are addressed effectively without compromising project timelines or deliverables.

Responsibilities:

• Collaborate with project teams to support the achievement of project milestones by resolving security-related technical challenges.
• Identify, analyze, and remediate security issues that arise during project execution.
• Develop and implement practical, risk-based solutions to unblock project activities impacted by security constraints.
• Work closely with stakeholders to balance security requirements with operational and project needs.
• Troubleshoot and resolve technical issues related to networks and systems.
• Maintain and enhance security processes, procedures, standards, guidance, and documentation to reflect changes in the company’s IT environment.

Required Skills:

• Good understanding of networks and operating systems (i.e., Linux, Windows).
• Good understanding of information security principles (i.e., least privileges, defense in depth).
• Demonstrated ability around information security risk analysis and periodic information system activity reviews for information security processes.
• Solid multi-platform knowledge. Experience in UNIX, Windows, Linux, and IP intranet/Internet security environments, including firewalls, intrusion detection, incident response, policy writing, vulnerability testing, operating system hardening, regulatory compliance, and data classification.
• Demonstrable experience architecting and implementing security solutions, policies, and technologies relating to transactional web sites.
• Understanding of industry security best practices such as PCI-DSS, ISO27001, NIST, etc.
• Ability to monitor advancements in information security technologies, which include Imperva WAF, VPN, End Point Response, Password Management System, and web proxy.

Preferred Skills:

• Strong problem-solving skills with an analytical mindset.
• Ability to think creatively and approach challenges from unconventional perspectives.
• Holding certifications such as CISA, CISSP, CISM, SSCP, CCSP, CPP, CNSP, CNSA, or ICSE is highly desirable.