Security Engineer

About the Role

Are you a seasoned cybersecurity specialist who excels under pressure when resolving high-stakes security incidents?

Do you have an architectural mindset for designing ironclad firewall policies, detection rules, and zero-trust controls that keep complex enterprise systems safe?

We are seeking a high-caliber Security Engineer to join our cybersecurity team in Kuala Lumpur. In this pivotal role, you will be the definitive technical escalation authority for critical security events and the primary architect driving the lifecycle design, optimization, and governance of security policies across our perimeter, endpoint, and cloud environments.

What You Will Do

1. Tier 3 Technical Escalation & Incident Response

• Act as the senior escalation authority for Tier 1 and Tier 2 analysts, taking ownership of high-severity, advanced, or multi-vector security incidents.

• Perform in-depth log analysis from SIEM, XDR, firewall, and other solutions to investigate complex incidents

• Direct threat containment, eradication, and post-incident hardening across multi-cloud and on-premises environments.

• Ensure all incidents are thoroughly documented, including timelines, analysis, mitigation steps, and lesson learned.

2. Detection Engineering & Continuous Optimization

• Author, calibrate, and maintain high-fidelity correlation rules using Sigma, YARA, Snort/Suricata, KQL, and SPL.

• Map defensive detection capabilities systematically against the MITRE ATT&CK framework to close operational blind spots.

• Minimize alert fatigue and suppress false positives to maximize SOC operational speed and precision.

3. Proactive Threat Hunting & Adversary Emulation

• Design and execute hypothesis-driven threat hunts across endpoint, network, and cloud telemetry to uncover advanced persistent threats (APTs), lateral movement, and hidden anomalies.

• Utilize threat intelligence feeds, IoCs, and TTPs (Tactics, Techniques, and Procedures) to proactively search for lingering artifacts or zero-day indicators before alerts trigger.

• Conduct regular red/purple team collaboration exercises to validate detection efficacy and stress-test existing security controls.

4. Security Governance, Process & Policy Optimization

• Own the continuous improvement of incident response playbooks, escalation workflows, and standard operating procedures (SOPs) to reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).

• Audit, refine, and enforce enterprise firewall rulesets, WAF policies, and zero-trust access controls to minimize the attack surface without impacting business velocity.

• Collaborate with IT, infrastructure, and DevOps teams to embed security baseline configurations and policy-as-code principles across hybrid cloud environments.

What We Are Looking For

Minimum Qualifications

• Experience: 5+ years in technical security operations or security engineering, including 2+ years as a Tier 3 technical escalation authority.

• Perimeter & WAF Mastery: Proven track record in designing, auditing, and troubleshooting complex NGFW rulesets (Palo Alto PAN-OS, Fortinet FortiOS), NAT policies, application-layer inspection, and enterprise WAF configurations.

• Core Technology Stack: Hands-on experience across key enterprise security tiers:

  • SIEM / SOAR: Splunk, Microsoft Sentinel, or Cortex XSOAR.

  • EDR / XDR: CrowdStrike Falcon or Microsoft Defender for Endpoint.

  • NGFW / WAF: Enterprise firewalls and web application firewalls.

• Detection & Query Languages: Hands-on proficiency authoring detection rules and investigative queries in at least two of the following: KQL, SPL, Sigma, YARA, or Snort/Suricata.

• Threat Hunting & Triage Capabilities: Demonstrated experience conducting hypothesis-driven threat hunts, analyzing endpoint/network telemetry, and systematically using MITRE ATT&CK to close operational detection gaps.

• Education & Communication: Bachelor’s degree in Computer Science, Cybersecurity, IT, or related discipline (or equivalent practical experience); fluent professional English communication skills (written and spoken) for cross-team collaboration and incident postmortems.

Preferred / Advantageous

• Recognized Professional Certifications: Holding one or more of the following credentials is a strong advantage:

  • (ISC)² CISSP

  • GIAC Certifications (GCIH, GCFA, GCIA, GCED)

  • Vendor Specialist (PCNSE, Fortinet NSE 7/8)

  • Cisco (CCNP Security)

  • Offensive/Cloud Credentials (OffSec OSCP, CCSP, AWS Certified Security - Specialty)

• Automation & Scripting: Practical proficiency with Python, PowerShell, or Bash for log parsing, API integrations, micro-batching alerts, and operational scripting.

• Infrastructure & Policy as Code: Experience with Terraform, Ansible, or GitOps workflows for deploying and enforcing baseline security controls across multi-cloud environments.

• Local Sector & Regulatory Knowledge: Direct experience navigating compliance frameworks (e.g., BNM RMiT, CNI guidelines) within Malaysian Banking/FinTech, Telecommunications, or Critical National Infrastructure.

• Advanced Architecture: Familiarity with micro-segmentation solutions (e.g., Illumio, VMware NSX) and custom SOAR workflow development.

Please refer to job description.