Security Engineer

Key Responsibilities

• Lead the monitoring and analysis of security events across networks, applications, and systems.

• Oversee incident response activities, ensuring rapid containment, investigation, and remediation.

• Conduct advanced threat hunting and forensic analysis to identify sophisticated attacks.

• Develop and enforce security policies, standards, and procedures across the organization.

• Collaborate with IT, compliance, and business units to align security initiatives with organizational goals.

• Evaluate and recommend new security tools, technologies, and processes.

• Prepare and review reports on security posture, risks, and incident trends.

• Stay ahead of emerging threats, vulnerabilities, and regulatory requirements.

• Assist with security audits and assessments.

Qualifications

• Bachelor’s or Master’s degree in computer science, Cybersecurity, or related field.

• 5–8 years of experience in cybersecurity.

• Strong expertise in SIEM platforms, intrusion detection/prevention, endpoint protection, and cloud security.

• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory standards (MAS TRM, PDPA and Cyber Hygiene).

• Proven experience in incident response, digital forensics, and threat intelligence.

• Excellent leadership, communication, and stakeholder management skills.

• Excellent analytical, problem-solving, and communication skills.

Preferred Skills

• Advanced certifications such as CISSP, CISM, OSCP.

• Fluent in Chinese and English.

• Experience with cloud security (AWS, Azure)

• Experience with security automation and orchestration (SOAR).

• Familiarity with DevSecOps practices and secure software development lifecycle.

• Ability to translate complex technical risks into clear business impacts.