Security Engineer

Kuching, Malaysia

Security Engineer

X-FAB is seeking a Security Engineer to safeguard our global IT infrastructure. You will be responsible for protecting X-FAB's digital assets by implementing robust defenses against cyber threats. This includes conducting vulnerability assessments, developing countermeasures, and ensuring compliance with IT security standards. You will also play a key role in enhancing security awareness through employee training and advising management on strategic security investments. As a member of the Global IT Security Team, you will collaborate with other Security Engineers to ensure adherence to X-FAB's IT security standards and industry best practices.

Required Qualifications

1. Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field.
2. Candidates with at least 5 year(s) of working experience in the related field are added advantage for this position.
3. Must be able to work independently with minimum supervision.

1. In-depth knowledge of information security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework, PCI DSS).
2. Proven experience in developing, implementing, and maintaining IT security policies, procedures, and standards.
3. Strong understanding of risk assessment and management methodologies.
4. Excellent analytical and problem-solving skills to identify, assess, and mitigate security risks.

1. Understanding complex technical issues and managing them within a fast-paced business environment.
2. Maintaining all the software and hardware appliances in relation to security.
3. Identifying current and emerging technology issues including security trends, vulnerabilities, and threats.
4. Sourcing and implementing new security solutions to better protect the organization.
5. Conducting proactive research to analyze security weaknesses and recommend appropriate strategies.
6. Develop best practices and security standards for the organization.
7. Maintain systems plus controls to protect unauthorized access, disclosure, modification, and deletion of information through resources and computer networks.
8. Research opportunities to improve information security standards and identify best practices.
9. Design and implement procedures and controls necessary to protect information systems and data.
10. Provide guidance and direction both within information security and among users for the physical protection of information system assets, organization information, and customer data.
11. Enhance systems by implementing and maintaining information security controls.
12. Conduct routine security risk analysis, evaluate business needs against collision, vulnerabilities and search resulting risks.
13. Assist fellow employees with IT security needs.
14. Perform regular security audits using tools and provide reports.
15. Liaise with vendors to implement security solutions.
16. Provide out-of-hours support coverage when scheduled to the support region.
17. Documentation.
18. Perform any other duties as assigned.

1. Good knowledge of technical & administrative skills in various operating systems, including Microsoft Windows & Linux.
2. Extensive knowledge of operating system and database security.
3. Good knowledge of IT Security Design Architecture, OSI model, TCP/IP model, Network Security and Protocols.
4. Good knowledge and experience with security infrastructure (Firewalls, IDS/IPS, SIEM, Anti-Malware, DRM, DLP, vulnerability scanners, etc.).
5. Good knowledge and familiarity of IT networking fundamentals (TCP/IP, DNS, Switches, Routers, RADIUS/TACACS+, etc.).
6. Able to develop security concepts, and participate in the definition of secure IT architectures and IT solutions.
7. An analytical mind with excellent problem-solving ability.
8. Outstanding decision-making, communication, and organization skills.
9. Team player with well-developed interpersonal skills who is comfortable in a cross-functional, multi-cultural environment.

Contact person: Kristina Sim

Apply now

Back to list