job description
Are you a passionate cybersecurity professional looking to elevate your career with a leading consultancy firm in the heart of Kuala Lumpur? Mission Consultancy Services Malaysia is seeking a skilled Security Engineer to join our high-performing IT team. In this role, you will play a pivotal part in protecting our clients' digital infrastructure, implementing robust security architectures, and ensuring compliance with industry standards.
As a Security Engineer, you will work on the front lines of information security, identifying vulnerabilities, responding to incidents, and driving security-first initiatives across our projects. We are looking for an analytical mind who is eager to stay ahead of the latest threat landscapes and provide innovative solutions to complex security challenges. If you thrive in a collaborative environment and are dedicated to maintaining the integrity, confidentiality, and availability of critical data, we want to hear from you.
Responsibility
- Design, implement, and maintain comprehensive security measures to protect internal and client-facing systems.
- Conduct regular vulnerability assessments and penetration testing to identify and remediate security gaps.
- Monitor network traffic and security logs to detect and respond to potential threats or unauthorized activities.
- Develop and enforce security policies, protocols, and standard operating procedures (SOPs) aligned with ISO/IEC 27001 or similar frameworks.
- Collaborate with cross-functional teams to integrate security best practices into the software development life cycle (SDLC).
- Manage and configure security tools, including firewalls, IDS/IPS, VPNs, and Endpoint Detection and Response (EDR) solutions.
- Prepare incident response reports and provide recommendations for system hardening and security enhancement.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 2-4 years of professional experience in security engineering or network security.
- Solid understanding of network protocols, operating systems (Linux/Windows), and cloud security architecture.
- Hands-on experience with security tools such as SIEM, WAF, and vulnerability scanners (e.g., Nessus, Burp Suite).
- Professional certifications such as CompTIA Security+, CEH, CISSP, or CISM are highly advantageous.
- Strong analytical, problem-solving, and incident response capabilities.
- Excellent communication skills with the ability to articulate technical security risks to non-technical stakeholders.